EXPOSURES › CVE-2026-2773

CVE-2026-2773

CRITICAL

DETAIL

SourceNVD · cve Published2026-02-24 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-2773 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

mozilla · vendor firefox · product thunderbird · product

DESCRIPTION

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.