3047 matches found
CVE-2026-2764 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
EUVD-2026-8486
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox 148, Firefox ESR 115.33, and Firefox ESR 140.8...
CVE-2026-2764 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
CVE-2026-2764
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
CVE-2024-1524 A local user can be impersonated when using federated authentication with Silent JIT Provisioning.
When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...
Mozilla’s various products have vulnerabilities related to resource management.
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in several Mozilla products that...
CVE-2026-2764: Use After Free
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
PT-2026-21729
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A JIT miscompilation issue exists in the JavaScript: WebAssembly component. JIT Just-In-Time compilation is a method used by browsers to improve execution speed by...
CVE-2026-2796: Access of Resource Using Incompatible Type
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...
Mozilla’s various products have vulnerabilities related to resource management.
Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...
CVE-2026-2766: Use After Free
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
Mozilla Firefox and Mozilla Thunderbird security vulnerabilities
Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...
CVE-2026-2783: Access of Resource Using Incompatible Type
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
Firefox -- Multiple vulnerabilities
CVE-2026-2807: Memory safety bugs present in Firefox 147 and Thunderbird 147 CVE-2026-2806: Uninitialized memory in the Graphics: Text component. CVE-2026-2805: Invalid pointer in the DOM: Core & HTML component. CVE-2026-2804: Use-after-free in the JavaScript: WebAssembly component. CVE-2026-2803...
php:php-fuzz-function-jit: Heap-use-after-free in i_zval_ptr_dtor
Detailed Report: https://oss-fuzz.com/testcase?key=6239113555804160 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7c4f96217bb1 Crash State: izvalptrdtor concatfunction...
jit-cli (0.1.0), langchain-icosa (>=1.0.0, <=1.1.2) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.2.24)
langchain-core PYPI version 0.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - jit-cli 0.1.0 - langchain-icosa =1.0.0, =1.2.0, =1.2.0, =1.2.6 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...
OESA-2026-1285 thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in...
ROS-20260203-73-0032
A vulnerability in the bpfjitcomp.c component of the Linux operating system kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
wamr:wamr_fuzz_llvm_jit: Null-dereference READ in execute_post_instantiate_functions
Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4578967146528768 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzllvmjit Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Null-dereference READ Crash...
OESA-2026-1264 thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in...