CVE-2026-2774
Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- CVSS
- 9.8
- EPSS
- 0.54% 42.5% percentile
- CISA KEV
- Not listed
- Published
- 2026.02.24