CVE-2026-2759

CriticalCVSS 9.8

Published: 24/02/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A vulnerability in the Graphics: ImageLib component of Firefox and Thunderbird is caused by incorrect boundary conditions. This flaw may lead to unexpected behavior when processing images.

Risk Assessment

An attacker could exploit this vulnerability to achieve remote code execution or cause application crashes, compromising system confidentiality and availability.

Recommendation

Immediately update Firefox to version 148, Firefox ESR to 115.33 or 140.8, and Thunderbird to version 148 or 140.8.

Original NVD description (English source)

Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.