7.5 High
CVE-2026-6746
Use-after-free in the DOM: Core & HTML component
MozillaFirefox
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.6%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
SeverityCVSS
7.5High
Description NVD
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Coverage 1 article · 1 outlet
- Claude Mythos Finds 271 Firefox VulnerabilitiesSecurityWeek · first in our coverage