Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2656 articles · 130317 vulns · 36/41 feeds (7d)
← Back to list
7.3
CVE-2026-7324EXPLOITEDPATCHED
mozilla · firefox

Memory safety bugs fixed in Firefox 150.0.1 and Thunderbird 150.0.1

Description

Memory safety bugs present in Firefox 150.0.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1.

Affected Products

VendorProductVersions
mozillafirefox< 150

References

  • https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029419%2C2029717%2C2029769%2C2029886
  • https://www.mozilla.org/security/advisories/mfsa2026-35/

Related News (4 articles)

Tier C
Schneier on Security3h ago
Claude Mythos Has Found 271 Zero-Days in Firefox
→ No new info (linked only)
Tier D
SecurityWeek4h ago
Chrome 147, Firefox 150 Security Updates Rolling Out
→ No new info (linked only)
Tier C
VulDB21h ago
CVE-2026-7324 | Mozilla Thunderbird up to 150.0.0 memory corruption
→ No new info (linked only)
Tier C
VulDB21h ago
CVE-2026-7324 | Mozilla Firefox up to 150.0.0 memory corruption
→ No new info (linked only)
CVSS 3.17.3 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
150.0.1
CWECWE-119
PublishedApr 28, 2026
Last enriched21h agov2
Tags
memory corruptionzero-dayai-assisted discoverybrowser security
Trending Score75
Source articles4
Independent3
Info Completeness8/14
Missing: versions, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-7320EXP
Information disclosure due to incorrect boundary conditions in the Audio/Video component
Trending: 67
HIGHCVE-2026-7322EXP
Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1
Trending: 58
HIGHCVE-2026-7323
Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1
Trending: 39
CRITICALCVE-2026-7321
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
Trending: 32
CRITICALCVE-2026-6768EXP
Mitigation bypass in the Networking: Cookies component
Trending: 26

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 28, 2026
Discovered by ZDM
Apr 28, 2026
Actively Exploited
Apr 28, 2026
Patch Available
Apr 28, 2026
Updated: severity, cweIds, activelyExploited, tags
Apr 28, 2026

Version History

v2
Last enriched 21h ago
v2Tier C21h ago

Updated severity to CRITICAL, added CWE-119, and marked the vulnerability as actively exploited.

severitycweIdsactivelyExploitedtags
via VulDB
v123h ago

Initial creation