Wednesday, October 14, 2026
Follow us On Linkedin
Mozilla Firefox 150 Released With Fixes for Multiple Code Execution Vulnerabilities
CVE/vulnerabilityCyber Security NewsFirefox
2 min.Read

Mozilla Firefox 150 Released With Fixes for Multiple Code Execution Vulnerabilities

Divya
By Divya

Mozilla has released Firefox 150 to patch 41 security vulnerabilities, including multiple high-severity flaws that could lead to remote code execution.

Users should immediately update their browsers to protect against these critical memory corruption and use-after-free bugs.

Critical Vulnerability Details

The most dangerous flaws include use-after-free vulnerabilities in the DOM (CVE-2026-6746) and WebRTC (CVE-2026-6747) components.

These occur when the application incorrectly uses a freed memory pointer, potentially allowing attackers to execute arbitrary malicious code or crash the system.

Security researchers notably utilized Anthropic’s Claude AI to help discover several of these complex memory safety bugs.

This update resolves a wide spectrum of issues ranging from high-severity memory corruption bugs to low-impact denial-of-service vulnerabilities.

The comprehensive breakdown of all Common Vulnerabilities and Exposures (CVEs) addressed in Firefox 150 is detailed below.

CVE IDVulnerability DescriptionImpact
CVE-2026-6746Use-after-free in the DOM: Core & HTML componentHigh 
CVE-2026-6747Use-after-free in the WebRTC componentHigh 
CVE-2026-6748Uninitialized memory in the Audio/Video: Web Codecs componentHigh 
CVE-2026-6749Information disclosure due to uninitialized memory in Graphics: Canvas2DHigh 
CVE-2026-6750Privilege escalation in the Graphics: WebRender componentHigh 
CVE-2026-6751Uninitialized memory in the Audio/Video: Web Codecs componentHigh 
CVE-2026-6752Incorrect boundary conditions in the WebRTC componentHigh 
CVE-2026-6753Incorrect boundary conditions in the WebRTC componentHigh 
CVE-2026-6754Use-after-free in the JavaScript Engine componentHigh 
CVE-2026-6755Mitigation bypass in the DOM: postMessage componentModerate 
CVE-2026-6756Mitigation bypass in Firefox for AndroidModerate 
CVE-2026-6757Invalid pointer in the JavaScript: WebAssembly componentModerate 
CVE-2026-6758Use-after-free in the JavaScript: WebAssembly componentModerate 
CVE-2026-6759Use-after-free in the Widget: Cocoa componentModerate 
CVE-2026-6760Mitigation bypass in the Networking: Cookies componentModerate 
CVE-2026-6761Privilege escalation in the Networking componentModerate 
CVE-2026-6762Spoofing issue in the DOM: Core & HTML componentModerate 
CVE-2026-6763Mitigation bypass in the File Handling componentModerate 
CVE-2026-6764Incorrect boundary conditions in the DOM: Device Interfaces componentModerate 
CVE-2026-6765Information disclosure in the Form Autofill componentModerate 
CVE-2026-6766Incorrect boundary conditions in the Libraries component in NSSModerate 
CVE-2026-6767Other issue in the Libraries component in NSSModerate 
CVE-2026-6768Mitigation bypass in the Networking: Cookies componentModerate 
CVE-2026-6769Privilege escalation in the Debugger componentModerate 
CVE-2026-6770Other issue in the Storage: IndexedDB componentModerate 
CVE-2026-6771Mitigation bypass in the DOM: Security componentModerate 
CVE-2026-6772Incorrect boundary conditions in the Libraries component in NSSModerate 
CVE-2026-6773Denial-of-service due to integer overflow in Graphics: WebGPULow 
CVE-2026-6774Mitigation bypass in the DOM: Security componentLow 
CVE-2026-6775Incorrect boundary conditions in the WebRTC componentLow 
CVE-2026-6776Incorrect boundary conditions in the WebRTC: Networking componentLow 
CVE-2026-6777Other issue in the Networking: DNS componentLow 
CVE-2026-6778Invalid pointer in the Audio/Video: Playback componentLow 
CVE-2026-6779Other issue in the JavaScript Engine componentLow 
CVE-2026-6780Denial-of-service in the Audio/Video: Playback componentLow 
CVE-2026-6781Denial-of-service in the Audio/Video: Playback componentLow 
CVE-2026-6782Information disclosure in the IP Protection componentLow 
CVE-2026-6783Incorrect boundary conditions/integer overflow in Audio/Video: PlaybackLow 
CVE-2026-6784Memory safety bugs fixed in Firefox 150 and Thunderbird 150High 
CVE-2026-6785Memory safety bugs fixed in ESR 115.35, ESR 140.10, and Firefox 150High 
CVE-2026-6786Memory safety bugs fixed in ESR 140.10 and Firefox 150High 

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

Infosec- Resources

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

1
What is Deep Web The deep web, invisible web, or...
SOC Architecture

How to Build and Run a Security Operations Center (SOC Guide) – 2023

12
Today’s Cyber security operations center (CSOC) should have everything...
Cyber Security News

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

0
TeamViewer's popularity and remote access capabilities make it an...
Checklist

Web Server Penetration Testing Checklist – 2026

0
Web server pentesting is performed under three significant categories: identity,...
Infosec- Resources

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

4
ATM Penetration testing, Hackers have found different approaches to...

Topics

CVE/vulnerability

Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days

0
Microsoft’s October 2026 Patch Tuesday security updates address 1,411...
cyber security

iOS Exploit Kits Can Compromise iPhones Through a Single Malicious Website

0
A single visit to a compromised or deceptive website...
Press Release

Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

0
Torrance, California, October 13th, 2026, CyberNewswire Criminal IP, developed by...
Press Release

G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

0
Amsterdam, Netherlands, October 13th, 2026, CyberNewswire Antivirus and security software...
Cyber Security News

Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C

0
Hundreds of French supermarkets experienced refrigeration disruptions after hackers...
CVE/vulnerability

SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems

0
SAP’s Security Patch Day on October 13, 2026, addresses...
cyber security

Attackers Can Hijack npm Packages Without Stealing Developer Credentials

0
A flaw in npm’s Trusted Publishing mechanism could let...
Cyber Security News

Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices

0
Anthropic researchers have raised concerns that small artificial intelligence...

Related Articles

Recent News

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

Company

Resources

Subscribe

Copyright @ 2016 - 2026 GBHackers On Security - All Rights Reserved