Firefox <148 / ESR <115.33, <140.8 Undefined Behavior in DOM (CVE2026-2771)
CVE-2026-2771 Published on February 24, 2026

Undefined behavior in the DOM: Core & HTML component
Undefined behavior in the DOM: Core & HTML component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

NVD


Products Associated with CVE-2026-2771

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-2771 are published in these products:

 
 

Affected Versions

Mozilla Firefox: Mozilla Firefox ESR: Mozilla Firefox ESR: Mozilla Thunderbird: Mozilla Thunderbird: