Skip to content

CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-3846

Same-origin policy bypass in the CSS Parsing and Computation component

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-03-10
Updated: 2026-04-13
Assigning organization: mozilla

Description

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

148.0.2 to ≤ *unaffected

References