CVE-2026-4726
Denial-of-service in the XML component.
Published Mar 24, 2026 · updated Jun 17, 2026 · mozilla firefox
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Jun 17, 2026 · NIST NVD
Updated
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Affected
- cpe mozilla/firefoxversion unspecified
- cpe mozilla/thunderbirdversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-4726
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4726
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
nvd.nist.gov