WebRender Use-After-Free Race in Firefox <149 (ESR <115.34/140.9)
CVE-2026-4684 Published on March 24, 2026
Race condition, use-after-free in the Graphics: WebRender component
Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
Vulnerability Analysis
CVE-2026-4684 is exploitable with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Types
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2026-4684 has been classified to as a Dangling pointer vulnerability or weakness.
What is a Race Condition Vulnerability?
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.
CVE-2026-4684 has been classified to as a Race Condition vulnerability or weakness.
Products Associated with CVE-2026-4684
Want to know whenever a new CVE is published for Mozilla products? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version unspecified and below 149 is affected.
- Version unspecified and below 115.34 is affected.
- Version unspecified and below 140.9 is affected.
- Version unspecified and below 149 is affected.
- Version unspecified and below 140.9 is affected.