CVE-2026-2759

CriticalCVSS 9.8

Published: 24/02/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

Summary

A vulnerability in the Graphics: ImageLib component of Firefox and Thunderbird is caused by incorrect boundary conditions. This flaw may lead to unexpected behavior when processing images.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, compromising system confidentiality and availability.

Recommendation

Immediately update Firefox to version 148, Firefox ESR to 115.33 or 140.8, and Thunderbird to version 148 or 140.8.

Original NVD description (English source)

Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.