CVE detail
CVE-2026-4684
Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
34 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4684.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 24, 2026, 1:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2450721bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/security/cve/CVE-2026-4684access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8850access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8427access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8315access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8290access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8289access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8288access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8287access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8286access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8285access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:8284access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7858access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7845access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7843access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7842access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7841access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7840access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7839access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7838access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:7837access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:6917access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:6342access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:6188access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:5932access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:5931access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:5930access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 24, 2026, 1:16 PM - https://www.mozilla.org/security/advisories/mfsa2026-24/www.mozilla.org
No excerpt available.
Vendor Advisorywww.mozilla.orgMar 24, 2026, 1:16 PM - https://www.mozilla.org/security/advisories/mfsa2026-23/www.mozilla.org
No excerpt available.
Vendor Advisorywww.mozilla.orgMar 24, 2026, 1:16 PM - https://www.mozilla.org/security/advisories/mfsa2026-22/www.mozilla.org
No excerpt available.
Vendor Advisorywww.mozilla.orgMar 24, 2026, 1:16 PM - https://www.mozilla.org/security/advisories/mfsa2026-21/www.mozilla.org
No excerpt available.
Vendor Advisorywww.mozilla.orgMar 24, 2026, 1:16 PM - https://www.mozilla.org/security/advisories/mfsa2026-20/www.mozilla.org
No excerpt available.
Vendor Advisorywww.mozilla.orgMar 24, 2026, 1:16 PM - https://bugzilla.mozilla.org/show_bug.cgi?id=2011129bugzilla.mozilla.org
No excerpt available.
Exploitbugzilla.mozilla.orgMar 24, 2026, 1:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2020-15670CVSS 8.8 · High
Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so…
- CVE-2020-12420CVSS 8.8 · High
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This v…
- CVE-2020-12416CVSS 8.8 · High
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitabl…
- CVE-2020-12405CVSS 5.3 · Medium
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.…
- CVE-2020-12387CVSS 8.1 · High
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Fire…
- CVE-2020-6819CVSS 8.1 · High
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This…