Mozilla Firefox 150 Launched With Fixes for A number of Code Execution Vulnerabilities

Mozilla has launched Firefox 150 to patch 41 safety vulnerabilities, together with a number of high-severity flaws that would result in distant code execution.

Customers ought to instantly replace their browsers to guard towards these crucial reminiscence corruption and use-after-free bugs.

Important Vulnerability Particulars

Probably the most harmful flaws embody use-after-free vulnerabilities within the DOM (CVE-2026-6746) and WebRTC (CVE-2026-6747) elements.

These happen when the appliance incorrectly makes use of a freed reminiscence pointer, doubtlessly permitting attackers to execute arbitrary malicious code or crash the system.

Safety researchers notably utilized Anthropic’s Claude AI to assist uncover a number of of those complicated reminiscence security bugs.

This replace resolves a large spectrum of points starting from high-severity reminiscence corruption bugs to low-impact denial-of-service vulnerabilities.

The great breakdown of all Frequent Vulnerabilities and Exposures (CVEs) addressed in Firefox 150 is detailed beneath.

CVE ID	Vulnerability Description	Affect
CVE-2026-6746	Use-after-free within the DOM: Core & HTML element	Excessive
CVE-2026-6747	Use-after-free within the WebRTC element	Excessive
CVE-2026-6748	Uninitialized reminiscence within the Audio/Video: Net Codecs element	Excessive
CVE-2026-6749	Info disclosure resulting from uninitialized reminiscence in Graphics: Canvas2D	Excessive
CVE-2026-6750	Privilege escalation within the Graphics: WebRender element	Excessive
CVE-2026-6751	Uninitialized reminiscence within the Audio/Video: Net Codecs element	Excessive
CVE-2026-6752	Incorrect boundary situations within the WebRTC element	Excessive
CVE-2026-6753	Incorrect boundary situations within the WebRTC element	Excessive
CVE-2026-6754	Use-after-free within the JavaScript Engine element	Excessive
CVE-2026-6755	Mitigation bypass within the DOM: postMessage element	Average
CVE-2026-6756	Mitigation bypass in Firefox for Android	Average
CVE-2026-6757	Invalid pointer within the JavaScript: WebAssembly element	Average
CVE-2026-6758	Use-after-free within the JavaScript: WebAssembly element	Average
CVE-2026-6759	Use-after-free within the Widget: Cocoa element	Average
CVE-2026-6760	Mitigation bypass within the Networking: Cookies element	Average
CVE-2026-6761	Privilege escalation within the Networking element	Average
CVE-2026-6762	Spoofing concern within the DOM: Core & HTML element	Average
CVE-2026-6763	Mitigation bypass within the File Dealing with element	Average
CVE-2026-6764	Incorrect boundary situations within the DOM: System Interfaces element	Average
CVE-2026-6765	Info disclosure within the Kind Autofill element	Average
CVE-2026-6766	Incorrect boundary situations within the Libraries element in NSS	Average
CVE-2026-6767	Different concern within the Libraries element in NSS	Average
CVE-2026-6768	Mitigation bypass within the Networking: Cookies element	Average
CVE-2026-6769	Privilege escalation within the Debugger element	Average
CVE-2026-6770	Different concern within the Storage: IndexedDB element	Average
CVE-2026-6771	Mitigation bypass within the DOM: Safety element	Average
CVE-2026-6772	Incorrect boundary situations within the Libraries element in NSS	Average
CVE-2026-6773	Denial-of-service resulting from integer overflow in Graphics: WebGPU	Low
CVE-2026-6774	Mitigation bypass within the DOM: Safety element	Low
CVE-2026-6775	Incorrect boundary situations within the WebRTC element	Low
CVE-2026-6776	Incorrect boundary situations within the WebRTC: Networking element	Low
CVE-2026-6777	Different concern within the Networking: DNS element	Low
CVE-2026-6778	Invalid pointer within the Audio/Video: Playback element	Low
CVE-2026-6779	Different concern within the JavaScript Engine element	Low
CVE-2026-6780	Denial-of-service within the Audio/Video: Playback element	Low
CVE-2026-6781	Denial-of-service within the Audio/Video: Playback element	Low
CVE-2026-6782	Info disclosure within the IP Safety element	Low
CVE-2026-6783	Incorrect boundary situations/integer overflow in Audio/Video: Playback	Low
CVE-2026-6784	Reminiscence security bugs fastened in Firefox 150 and Thunderbird 150	Excessive
CVE-2026-6785	Reminiscence security bugs fastened in ESR 115.35, ESR 140.10, and Firefox 150	Excessive
CVE-2026-6786	Reminiscence security bugs fastened in ESR 140.10 and Firefox 150	Excessive