CVE-2026-6748
Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10
Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
- CVSS
- 9.8
- EPSS
- 0.40% 32.1% percentile
- CISA KEV
- Not listed
- Published
- 2026.04.21