Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2897 articles · 109737 vulns · 38/41 feeds (7d)
← Back to list
8.8
CVE-2026-5732EXPLOITEDPATCHED
mozilla · firefox

Incorrect boundary conditions, integer overflow in the Graphics: Text component

Description

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability affects Firefox < 149.0.2, Firefox ESR < 140.9.1, Thunderbird < 149.0.2, and Thunderbird < 140.9.1.

Affected Products

VendorProductVersions
mozillafirefoxunspecified, unspecified, unspecified, unspecified

References

  • https://bugzilla.mozilla.org/show_bug.cgi?id=2017867
  • https://www.mozilla.org/security/advisories/mfsa2026-25/
  • https://www.mozilla.org/security/advisories/mfsa2026-27/
  • https://www.mozilla.org/security/advisories/mfsa2026-28/
  • https://www.mozilla.org/security/advisories/mfsa2026-29/

Related News (2 articles)

Tier B
CERT-FR2d ago
Multiples vulnérabilités dans les produits Mozilla (08 avril 2026)
→ No new info (linked only)
Tier C
VulDB2d ago
CVE-2026-5732 | Mozilla Firefox up to 149.0.1 Text integer overflow
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
149.0.2140.9.1
PublishedApr 7, 2026
Last enriched2d agov2
Trending Score42
Source articles2
Independent2
Info Completeness8/14
Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-5735EXP
Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2
Trending: 40
NONECVE-2026-5734EXP
Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
Trending: 37
CRITICALCVE-2026-5731
Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
Trending: 33
HIGHCVE-2026-5733
Incorrect boundary conditions in the Graphics: WebGPU component
Trending: 31
HIGHPRE-CVE
Multiple Vulnerabilities in Mozilla Firefox and Thunderbird Allow Denial of Service and Arbitrary Code Execution
Trending: 19

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 7, 2026
Discovered by ZDM
Apr 7, 2026
Updated: description, severity, cweIds, activelyExploited
Apr 7, 2026
Actively Exploited
Apr 7, 2026
Patch Available
Apr 7, 2026

Version History

v2
Last enriched 2d ago
v2Tier C2d ago

Updated description with new details, changed severity to CRITICAL, and noted that the vulnerability is actively exploited.

descriptionseveritycweIdsactivelyExploited
via VulDB
v12d ago

Initial creation