CVE-2026-2769Disclosure(mozilla / firefox)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox
  • thunderbird

Threat summary

  • Patch or workaround signal is available
  • 7 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 7 signals
  • Disclosure: 5 classified signals
  • Peaked 3d ago at 3 mentions (2026-02-25); latest day: 1
  • 7 total mentions across 5 days

Affected systems

Vendors
Products
firefoxthunderbird

Deep dive

Activity timeline7 mentions / 5d
01223Mentions · 2026-02-24: 1Mentions · 2026-02-25: 3Mentions · 2026-02-28: 1Mentions · 2026-03-01: 1Mentions · 2026-04-16: 1Patch / Workaround · 2026-02-25: 1Patch / Workaround · 2026-04-16: 1Technical Details · 2026-02-24: 1Technical Details · 2026-02-25: 3Technical Details · 2026-02-28: 1Technical Details · 2026-03-01: 1Technical Details · 2026-04-16: 102-2402-2502-2803-0104-16
Signal classification2 categories
Disclosure
571.4%
Patch
228.6%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-02-241
Disclosure1
2026-02-253
Disclosure2Patch1
2026-02-281
Disclosure1
2026-03-011
Disclosure1
2026-04-161
Patch1
Full discourse7 posts
  • Giuseppe Paternicola@giuseppe_1337
    Patch

    🚨 HIGH severity CVE-2026-2769 (CVSS 8.8): Use-after-free in Firefox/Thunderbird IndexedDB. Affects multiple versions. Patch immediately to Firefox 148, ESR 115.33/140.8, Thunderbird 148/140.8. #CVE #PatchNow #ThreatIntel https://t.co/M1FUmt56TE

    Post summary

    The tweet alerts about a high‑severity use‑after‑free vulnerability in Firefox/Thunderbird’s IndexedDB and urges immediate patching of the affected versions.

    0000035
    25 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2769 (CVSS:8.8, HIGH) is Analyzed. Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Fire..https://nvd.nist.gov/vuln/detail/CVE-2026-2769 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2026-2769, a use‑after‑free vulnerability in Firefox’s IndexedDB component, with a CVSS score of 8.8 and lists affected Firefox versions.

    0000029
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2769 (CVSS:8.8, HIGH) is Analyzed. Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Fire..https://nvd.nist.gov/vuln/detail/CVE-2026-2769 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The text announces CVE-2026-2769, a use‑after‑free vulnerability in Firefox’s IndexedDB component, with a CVSS score of 8.8 (HIGH).

    0000039
    173 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-2769 Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. https://www.cve.org/CVERecord?id=CVE-2026-2769 ----- Traducción: CVE-2026-2769 Uso-after-free en el componente d… http://infoflow.cloud`

    Post summary

    The text announces CVE-2026-2769, a use‑after‑free vulnerability in Firefox’s IndexedDB component affecting specific versions, with no mention of PoC, exploit, or patch.

    0000045
    54 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2769 Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. https://www.cve.org/CVERecord?id=CVE-2026-2769

    Post summary

    The text announces a use‑after‑free vulnerability in Firefox’s IndexedDB component, detailing affected versions but providing no PoC, exploit, or patch information.

    00000739
    56.6K followersView on X
  • PulsePatch.io@pulsepatchio
    Patch

    `Firefox ESR` and `Thunderbird` are affected by a high-severity use-after-free vulnerability (DEBIAN-CVE-2026-2769) in IndexedDB. Update to mitigate potential arbitrary code execution. #Firefox #Thunderbird #infosec https://www.pulsepatch.io/posts/debian-cve-2026-2769-firefox-esr-use-after-free

    Post summary

    A high‑severity use‑after‑free vulnerability (DEBIAN‑CVE‑2026‑2769) affects Firefox ESR and Thunderbird; users should update to mitigate potential arbitrary code execution.

    0000035
    1 followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-2769 - High Use-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. https://www.thehackerwire.com/vulnerability/CVE-2026-2769/ https://t.co/JnHnfu81DP

    Post summary

    The post announces a high‑severity use‑after‑free vulnerability in Firefox’s IndexedDB component, affecting specific versions, without mentioning PoC, exploit code, or a patch.

    0000066
    115 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillafirefox---
Appmozillathunderbird---
Appmozillathunderbird---

Explore more