CVE-2026-5733: Mozilla Firefox

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.

Affected products

• Mozilla Firefox: before 149.0.2 (fixed in 149.0.2)

Published 2026-04-07. Last modified 2026-07-15.