Skip to content
OpenAdvisories
High WID-SEC-2026-0678 3 CVEs

Mozilla Firefox: Mehrere Schwachstellen

Published Mar 10, 2026 · Updated Mar 10, 2026 · de-DE

Vendor: Mozilla Product: Firefox Platform: Android Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebigen Code auszuführen und den Browser zum Absturz zu bringen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 3

  • High 8.8
    CVE-2026-3845

    Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

    Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2.

    Mozilla Firefox firefox Browsers Wolfi
  • High 8.8
    CVE-2026-3847

    Memory safety bugs fixed in Firefox 148.0.2

    Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148.0.2.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  • Medium 6.5
    CVE-2026-3846

    Same-origin policy bypass in the CSS Parsing and Computation component

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi

Revision history

  1. #1

    Initiale Fassung

References