Critical Vulnerabilities in Firefox and Thunderbird Require Immediate Patching

Multiple critical memory-safety vulnerabilities (CVE-2026-4720, CVE-2026-4710, CVE-2026-4705) were disclosed for Firefox and Thunderbird on March 24, 2026; they allow remote, no-user-interaction exploitation leading to potential full system compromise (CVSS 9.8). Affected versions include Firefox <149 and Thunderbird <149 (ESR <140.9); patches are available and immediate updates to Firefox 149 / Thunderbird 149 or later are strongly recommended. No public proof-of-concept or active exploitation has been observed.