CVE-2026-2794

Опубликовано: 24 фев. 2026

Источник: nvd

CVSS3: 7.5

CVSS3: 6.5

CVSS3: 7.5

EPSS Низкий

Описание

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Версия до 148.0 (исключая)

EPSS

Процентиль: 23%

0.00304

Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVE-2026-2794

CVSS3: 7.5

ubuntu

9 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

CVE-2026-2794

CVSS3: 7.5

redhat

9 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

CVE-2026-2794

CVSS3: 7.5

debian

9 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Fire ...

GHSA-m8jj-q5xq-4qhp

CVSS3: 7.5

github

9 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability affects Firefox < 148.

ALT-PU-2026-4175

CVSS3: 10

altlinux

8 месяцев назад

ALT-PU-2026-4175: package `firefox` update to version 148.0-alt2

EPSS

Процентиль: 23%

0.00304

Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-908