Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-24 | 2 | Disclosure2 |
| 2026-03-25 | 1 | Disclosure1 |
In Firefox 149.0, the vulnerability I reported was assigned CVE-2026-4696(Use After Free in the Layout:Text and Fonts component) I have wanted to earn a CVE in Firefox for a long time, so I am very happy about this. https://t.co/csIu3qnhhC
Post summary
The tweet announces the assignment of CVE-2026-4696—an Use After Free in Firefox’s Text and Fonts component—without evidence of exploitation, PoC, or mitigation.
CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9. https://www.cve.org/CVERecord?id=CVE-2026-4696
Post summary
The text announces CVE-2026-4696, a use‑after‑free flaw in Firefox's Layout: Text and Fonts component, detailing affected versions and linking to the official CVE record.
🔴 CVE-2026-4696 - Critical Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, Firefox ESR &lt; 140.9, Thunderbird &lt; 149, and Thunderbird ... https://www.thehackerwire.com/vulnerability/CVE-2026-4696/ https://t.co/51gXcMQJhM
Post summary
CVE-2026-4696 is a critical use‑after‑free flaw in the layout engine of Firefox and Thunderbird affecting versions below 149, with no PoC or exploit evidence provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |