Mozilla Firefox Multiple Vulnerabilities

Release Date: 29 Apr 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Mozilla Firefox. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, security restriction bypass and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure

---

System / Technologies affected

Versions prior to:

 

• Firefox 150.0.1
• Firefox ESR 115.35.1
• Firefox ESR 140.10.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• Firefox 150.0.1
• Firefox ESR 115.35.1
• Firefox ESR 140.10.1

---

Vulnerability Identifier

• CVE-2026-7320
• CVE-2026-7321
• CVE-2026-7322
• CVE-2026-7323
• CVE-2026-7324

---

Source

• Mozilla

---

Related Link

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-35/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-36/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-37/