CVE Catalog

CVE-2026-14241

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Memory safety bugs were found in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code with enough effort. This vulnerability was fixed in Firefox 152.0.4.

Risk Assessment

An attacker could exploit these bugs to remotely execute arbitrary code on the victim's system, leading to browser takeover and potentially full system compromise.

Recommendation

Immediately update Firefox to version 152.0.4 or later, which includes the necessary security fixes.

Original NVD description (English source)

Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152.0.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS