Mozilla Firefox — CVE-2026-84143 (Critical)

Date Sep 1, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Mozilla · Firefox

CVE CVE-2026-84143

Critical vendor advisory CVE-2026-84143

Summary

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in Mozilla Firefox. Patch or mitigate promptly. EPSS percentile: 6%.

Operator check

Review CVE-2026-84143 in your asset inventory. Apply patches per vendor guidance and verify Firefox is not exposed. CVSS score: 9.8. EPSS probability: 0.2%; percentile: 6%.

Sources

NVD — CVE-2026-84143 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed