Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-24 | 1 | Disclosure1 |
| 2026-03-25 | 2 | Disclosure2 |
CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9. https://www.cve.org/CVERecord?id=CVE-2026-4691
Post summary
The tweet announces a newly disclosed CVE‑2026-4691, detailing a use‑after‑free vulnerability in Firefox’s CSS parsing system and indicating the affected versions.
-- Vulnerability Summary -- CVS:9.8 CVE-2026-4691 A malicous stylesheet will abuse a Use-After-Free in the CSS engine on firefox that leads to ACE and sandbox escape. No user interaction needed... #CyberSecurity #Infosec
Post summary
The post announces a high‑severity use‑after‑free flaw in Firefox's CSS engine that enables sandbox escape via a malicious stylesheet.
🔴 CVE-2026-4691 - Critical Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, Firefox ESR &lt; 140.9, Thunderbird &lt; 149, and Thunder... https://www.thehackerwire.com/vulnerability/CVE-2026-4691/ https://t.co/7fXlM5W8di
Post summary
The post announces CVE-2026-4691, detailing a critical use‑after‑free vulnerability in Firefox and Thunderbird CSS parsing, but it contains no exploit, PoC, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |