CVE-2026-5731

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-07 Modified: 2026-10-24 First seen: 2026-10-29 Status: pending_score

Description

Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.

Weakness Classification (2)

Affected Software (5)

VendorProductVersion
mozilla firefox 115.34.0
mozilla firefox 140.9.0
mozilla firefox 149.0.1
mozilla thunderbird 140.9.0
mozilla thunderbird 149.0.1

References & Advisories (33)

Showing 25 of 33 references

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00340
2026-10-28
0.00340

Intelligence Sources

nvd ref →