CVE-2026-7322Patch(mozilla / firefox)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-416CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox
  • thunderbird

Threat summary

  • Patch or workaround signal is available
  • 7 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 6 signals
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • Peaked 4d ago at 3 mentions (2026-04-28); latest day: 1
  • 7 total mentions across 5 days

Affected systems

Vendors
Products
firefoxthunderbird

Deep dive

Activity timeline7 mentions / 5d
01223Mentions · 2026-04-28: 3Mentions · 2026-05-01: 1Mentions · 2026-05-02: 1Mentions · 2026-05-03: 1Mentions · 2026-05-06: 1Patch / Workaround · 2026-04-28: 2Patch / Workaround · 2026-05-01: 1Patch / Workaround · 2026-05-02: 1Patch / Workaround · 2026-05-03: 1Patch / Workaround · 2026-05-06: 1Technical Details · 2026-04-28: 1Technical Details · 2026-05-01: 1Technical Details · 2026-05-03: 1Technical Details · 2026-05-06: 104-2805-0105-0205-0305-06
Signal classification2 categories
Patch
571.4%
Disclosure
228.6%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-04-283
Disclosure1Patch2
2026-05-011
Patch1
2026-05-021
Patch1
2026-05-031
Patch1
2026-05-061
Disclosure1
Full discourse7 posts
  • Ryo@りんご大好き@macmacintosh
    Patch

    Blog更新しました😊。 👉 Firefox Browser 150.0.1 リリース。 様々なバグ修正 及び セキュリティFixとして 影響度 クリティカルの CVE-2026-7322 等に対処。 - りんご大好き https://ryomac.blog.fc2.com/blog-entry-878.html

    Post summary

    The blog announces the Firefox 150.0.1 release, which includes a patch for the critical CVE-2026-7322, with no additional exploit or technical details provided.

    02030283
    802 followersView on X
  • innovaTopia@innovaTopia_JP
    Patch

    Thunderbird 150.0.1緊急アップデート公開、メモリ破損で任意コード実行の恐れ—4件の脆弱性をMozillaが修正 https://innovatopia.jp/cyber-security/cyber-security-news/100272/ 今回のアドバイザリで特に注目したいのは、4件のうち1件(CVE-2026-7322)が深刻度「critical(緊急)」に分類されている点です。

    Post summary

    Mozilla released an emergency update for Thunderbird 150.0.1, addressing four vulnerabilities including the critical CVE‑2026‑7322 that could lead to arbitrary code execution via memory corruption.

    01010155
    394 followersView on X
  • Ryo@りんご大好き@macmacintosh
    Patch

    Firefox Browser 150.0.1 リリース。 様々なバグ修正 及び セキュリティFixとして 影響度 クリティカルの CVE-2026-7322 等に対処。 https://www.firefox.com/en-US/firefox/150.0.1/releasenotes/ https://t.co/SSUnCtRBBf

    Post summary

    Firefox 150.0.1 includes patches for critical vulnerabilities such as CVE-2026-7322, as noted in the release notes.

    00020101
    802 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-7322: Mozilla Firefox and Thunderbird Memory Safety Bugs - What It Means for Your Business and How to Respond https://hubs.li/Q04fCCnq0

    Post summary

    The article announces the CVE‑2026‑7322 memory safety bugs in Firefox and Thunderbird and outlines remediation steps for organizations.

    0000035
    29 followersView on X
  • StrongKeep Cybersecurity@StrongKeepCyber
    Patch

    Emergency patch for Privacy-OS Tails over Tor Browser flaws (CVE-2026-7322). SMEs: keep privacy tools up to date, test updates in non‑production environments, and avoid sticking with old browser versions. Read more: https://www.security.nl/posting/934841/Privacy-OS+Tails+komt+wegens+Tor+Browser-kwetsbaarheden+met+noodpatch?channel=rss

    Post summary

    An emergency patch for CVE-2026-7322 affecting Privacy‑OS Tails over Tor Browser is announced, urging SMEs to update and providing a link for more information.

    0000038
    3 followersView on X
  • 脆弱なエンジニア@zubora_engineer
    Patch

    ”全4件の脆弱性が修正されておりこのうちメモリ安定性の問題により任意のコードが実行されてしまう恐れがある問題(CVE-2026-7322)は深刻度が同社の基準で4段階中最も高いcritical” 「Firefox」に任意のコードを実行される恐れがある致命的な脆弱性 ~修正版がリリース https://news.yahoo.co.jp/articles/fc68f71c4f6bf5527a21f7da0d1fb6d7de43136b

    Post summary

    The post announces that CVE‑2026‑7322, a critical memory‑stability flaw allowing arbitrary code execution, has been patched by the vendor.

    0000073
    228 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7322 Memory safety bugs present in Firefox ESR 115.35.0, Firefox ESR 140.10.0 and Firefox 150.0.0. Some of these bugs showed evidence of memory corruption and we presume tha… https://www.cve.org/CVERecord?id=CVE-2026-7322

    Post summary

    The entry reports CVE-2026-7322, identifying memory safety bugs in Firefox ESR 115.35.0, 140.10.0 and Firefox 150.0.0 that may cause memory corruption, but it offers no PoC, exploit, patch, or evidence of active exploitation.

    00000121
    57.3K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillafirefox---
Appmozillathunderbird---
Appmozillathunderbird---

Explore more