PatchGap
Firefox · Core

CVE-2026-74989

Memory Corruption in Core
Medium firefox Memory Corruption

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionInternally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
ComponentCore
Bug ClassMemory Corruption
Tracker2027388
CISA KEVNot listed
CreditedChristian Holler, Ryan Hunt, Tom Ritter and the Mozilla Fuzzing Team
Disclosed2026-08-18

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page