CVE-2026-6747

Published: Apr 21, 2026

Modified: May 26, 2026

PUBLISHED

Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Vendor	Product	Versions
Mozilla	Firefox	unaffected `140.10 - <= 140.` unaffected `150 - <= `
Mozilla	Thunderbird	unaffected `140.10 - <= 140.` unaffected `150 - <= `

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.