CVE-2026-2767: Critical WebAssembly Flaw in Firefox
CVE-2026-2767 is a use-after-free in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-2767 is a use-after-free in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
CVE-2026-2766 is a use-after-free in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
CVE-2026-27650 is a critical OS command injection in several BUFFALO Wi-Fi routers. Install the fixed firmware Buffalo lists for your exact model.
CVE-2026-2765 is a use-after-free in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
CVE-2026-27647 lets a second connection take over a charging station session in the Mobility46 backend. CISA lists no vendor fix, so apply mitigations.
CVE-2026-2764 is a critical JIT use-after-free in Firefox and Thunderbird. Fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart.
CVE-2026-27634 is a critical unauthenticated SQL injection in Piwigo date filters that can expose the database. Upgrade to Piwigo 16.3.0 or later.
CVE-2026-2763 is a use-after-free in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
CVE-2026-2762 is an integer overflow in Firefox and Thunderbird, fixed in Firefox 148, ESR 140.8 and Thunderbird 148. Update and restart every install.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.