cbcvebase.
CVE-2026-6746
published 2026-04-21

CVE-2026-6746: Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Affected

11 ranges
VendorProductVersion rangeFixed in
mozillafirefox< Firefox 150Firefox 150
mozillafirefox< 115.35.0115.35.0
mozillafirefox< 150.0150.0
mozillafirefox——
mozillafirefox>= 140.0 < 140.10.0140.10.0
mozillafirefox_esr< Firefox ESR 140.10Firefox ESR 140.10
mozillafirefox_esr< Firefox ESR 115.35Firefox ESR 115.35
mozillathunderbird< Thunderbird 150Thunderbird 150
mozillathunderbird< Thunderbird 140.10Thunderbird 140.10
mozillathunderbird< 140.10.0140.10.0
rhel10firefox-flatpak——