CVE-2026-2794
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.
CVSS
7.5
Alto
EPSS
0.3%
p17
KEV
—
Exploit Today
5
0-100
Publicado: 24 feb 2026 · Última mod.: 15 jul 2026 · CWE-908
0.3%EPSS · 30 días0.3%
2026-08-012026-08-28
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2008365
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-13/
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-2794
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2442286
- security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2794.json
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-792856.5 MED21.1%
——6Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-792706.5 MED21.1%
——6Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-792694.3 MED16.9%
——5Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-792296.5 MED21.1%
——6Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-792216.5 MED8.7%
——3Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-791206.5 MED15.4%
——5Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)1d