CVE-2026-2794

Опубликовано: 24 фев. 2026

Источник: nvd

CVSS3: 7.5

CVSS3: 6.5

CVSS3: 7.5

EPSS Низкий

Описание

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Версия до 148.0 (исключая)

EPSS

Процентиль: 17%

0.00253

Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVE-2026-2794

CVSS3: 7.5

ubuntu

5 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

CVE-2026-2794

CVSS3: 7.5

redhat

5 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

CVE-2026-2794

CVSS3: 7.5

debian

5 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Fire ...

GHSA-m8jj-q5xq-4qhp

CVSS3: 7.5

github

5 месяцев назад

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability affects Firefox < 148.

EPSS

Процентиль: 17%

0.00253

Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-908