high7.5
CVE-2026-4726
Denial-of-service in the XML component.
Impact
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 149.0 |
| Mozilla | Thunderbird | before 149.0 |