CVE-2026-2806
Uninitialized memory in the Graphics: Text component.
Published Feb 24, 2026 · updated Jun 17, 2026 · mozilla firefox
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 24, 2026 · NIST NVD
Detected
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Jun 17, 2026 · NIST NVD
Updated
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Affected
- cpe mozilla/firefoxversion unspecified
- cpe mozilla/thunderbirdversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-2806
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-2806
Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
nvd.nist.gov