Firetruck

CVE-2022-26486

KEV

Mozilla Firefox Use-After-Free Vulnerability

View CVE record →
Vendor / Project
Mozilla
Product
Firefox
Date added
Mar 7, 2022
Due date
Mar 21, 2022
Known ransomware use
Unknown
CWEs
CWE-416

Description

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

Required action

Apply updates per vendor instructions.

Notes