CVE-2026-2801 Mozilla Firefox WebAssembly Remote Code Execution

Vuldb • February 25, 2026

Share: View original

Affected by this vulnerability is an unknown functionality of the component WebAssembly. Performing a manipulation results in Remote Code Execution .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mozilla Firefox Remote Code Execution Vulnerabilities Identified Two vulnerabilities affecting Mozilla Firefox have been reported, both leading to Remote Code Execution. The vulnerabilities are documented as CVE-2026-2805 and CVE-2026-2801, with the former related to HTML manipulation and the latter concerning WebAssembly functionality. Both vulnerabilities were published on February 24, 2026. 5 sources 45

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

MITRE ATT&CK (1)

T1203 - Exploitation for Client Execution

Platforms (2)

Mozilla Firefox WebAssembly