Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-24 | 1 | Disclosure1 |
| 2026-04-17 | 1 | Patch1 |
CVE-2026-4708 Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9. https://www.cve.org/CVERecord?id=CVE-2026-4708
Post summary
CVE‑2026‑4708 is a boundary‑condition flaw in Firefox’s Graphics component affecting versions below 149, but no PoC, exploit, patch, or active exploitation details are provided.
🚨 HIGH: CVE-2026-4708 (CVSS 7.5) - Incorrect boundary conditions in Mozilla Graphics component. Network exploitable, no user interaction required. Fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149/140.9. Patch immediately. #CVE #PatchNow https://t.co/8Qtuo2RwQN
Post summary
The tweet announces CVE‑2026‑4708, describing its technical details and urging users to apply the patch released in upcoming Firefox and Thunderbird versions.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |