CVE-2026-4686 in Mozilla Firefox
Summary
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
Responsible
mozilla
Reservation
03/24/2026
Disclosure
03/24/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352733 | Mozilla Firefox Canvas2D memory corruption | 119 | Not defined | Official fix | CVE-2026-4686 |