CVE-2026-0892

Memory safety bugs fixed in Firefox 147 and Thunderbird 147

Critical 路 published January 13, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

馃敟 Memory safety issues are lurking in Firefox and Thunderbird 146, ready to play tricks. With just the right moves, an attacker could exploit these bugs to run arbitrary code! Think of it like a restaurant with a faulty kitchen鈥攊f the chef misreads a recipe, they could accidentally mix up ingredients, leading to disastrous results. In tech terms, it's a memory corruption issue that can lead to chaos in your system. If exploited, these memory safety bugs could allow an attacker to execute arbitrary code on your system, potentially leading to complete control over your environment. The fallout could be absolutely devastating, from data breaches to unauthorized access to sensitive information鈥攏o one wants that!

Put simply

Think of it like a restaurant with a faulty kitchen鈥攊f the chef misreads a recipe, they could accidentally mix up ingredients, leading to disastrous results. In tech terms, it's a memory corruption issue that can lead to chaos in your system. This vulnerability in Firefox and Thunderbird stems from memory safety bugs that create opportunities for memory corruption, which could be manipulated to run malicious code. Simply put, it's a flaw that lets attackers mess with how the system uses memory.

What to do

If exploited, these memory safety bugs could allow an attacker to execute arbitrary code on your system, potentially leading to complete control over your environment. The fallout could be absolutely devastating, from data breaches to unauthorized access to sensitive information鈥攏o one wants that! Immediately update Firefox and Thunderbird to version 147 to eliminate this vulnerability. It's critical to ensure your software is always up to date to protect against these sneaky issues! You've got this! Stay vigilant and keep your software patched鈥攜our superhero status is waiting! 馃Ω

The record
Technical detail
CVSS v3.1
9.8 路 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00452 路 38.3th percentile
Published
2026-01-13T13:30Z
EPSS history
Timeline
  • 13 JAN 13:30Z
    Memory safety bugs fixed in Firefox 147 and Thunderbird 147
    cvelistv5