Mozilla Firefox up to 147 HTML Remote Code Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mozilla Firefox Remote Code Execution Vulnerabilities Identified Two vulnerabilities affecting Mozilla Firefox have been reported, both leading to Remote Code Execution. The vulnerabilities are documented as CVE-2026-2805 and CVE-2026-2801, with the former related to HTML manipulation and the latter concerning WebAssembly functionality. Both vulnerabilities were published on February 24, 2026. 5 sources 45