Public research

  • 2026-05-31 CVE-2026-4691
    Use-after-free in CSS Parsing and Computation
    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.