CVE-2026-2770
Critical · 9.8CVSS
9.8
EPSS
0.7%
Published
Feb 24, 2026
CISA due date
—
The record
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | MozillaThunderbird | 0 | 140.8.0-150200.8.260.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | MozillaFirefox | 0 | 140.8.0-112.301.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | MozillaFirefox | 0 | 140.8.0-112.301.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | MozillaThunderbird | 0 | 140.8.0-150200.8.260.1 |
| openSUSE:Leap 15.6 | MozillaFirefox | 0 | 140.8.0-150200.152.222.1 |
| openSUSE:Leap 15.6 | MozillaThunderbird | 0 | 140.8.0-150200.8.260.1 |
| openSUSE:Leap 16.0 | MozillaFirefox | 0 | 140.8.0-160000.1.1 |
| openSUSE:Leap 16.0 | MozillaThunderbird | 0 | 140.8.1-bp160.1.1 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 148.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 140.8.0-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 140.8.0-1.1 |
Related vulnerabilities
- CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. Also affects MozillaFirefox
- CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component. Also affects MozillaFirefox
- CVE-2026-4713 Incorrect boundary conditions in the Graphics component. Also affects MozillaFirefox
- CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component. Also affects MozillaFirefox
- CVE-2026-4717 Privilege escalation in the Netmonitor component. Also affects MozillaFirefox
- CVE-2026-4711 Use-after-free in the Widget: Cocoa component. Also affects MozillaFirefox
- CVE-2026-4720 Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and… Also affects MozillaFirefox
- CVE-2026-4712 Information disclosure in the Widget: Cocoa component. Also affects MozillaFirefox