CVE-2022-26486 · Sandworm Watch

Mar 7, 2022high

CVE-2022-26486: Mozilla Firefox Use-After-Free Vulnerability

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. Required action: Apply updates per vendor instructions.

CVE-2022-26486EPSS 2.3%FirefoxMozilla

CISA KEV ↗ · unattributed attribution