Lucene search
+L

3047 matches found

Cvelist
Cvelist
•added 2026/02/24 1:33 p.m.•50 views

CVE-2026-2764 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

0.00685EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/24 1:33 p.m.•16 views

EUVD-2026-8486

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox 148, Firefox ESR 115.33, and Firefox ESR 140.8...

8.6AI score0.00685EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/24 1:33 p.m.•5 views

CVE-2026-2764 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

8.5AI score0.00685EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2026/02/24 1:33 p.m.•13 views

CVE-2026-2764

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS8.5AI score0.00685EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/02/24 8:51 a.m.•44 views

CVE-2024-1524 A local user can be impersonated when using federated authentication with Silent JIT Provisioning.

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

7.7CVSS0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•36 views

Mozilla’s various products have vulnerabilities related to resource management.

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in several Mozilla products that...

9.8CVSS9AI score0.00685EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•3 views

CVE-2026-2764: Use After Free

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS8.6AI score0.00685EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•10 views

PT-2026-21729

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A JIT miscompilation issue exists in the JavaScript: WebAssembly component. JIT Just-In-Time compilation is a method used by browsers to improve execution speed by...

10CVSS7.1AI score0.00856EPSS
SaveExploits7References306
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•7 views

CVE-2026-2796: Access of Resource Using Incompatible Type

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

9.8CVSS8.7AI score0.00757EPSS
SaveExploits4References4
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•20 views

Mozilla’s various products have vulnerabilities related to resource management.

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

9.8CVSS8.2AI score0.00685EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•4 views

CVE-2026-2766: Use After Free

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS8.3AI score0.00685EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•28 views

Mozilla Firefox and Mozilla Thunderbird security vulnerabilities

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

9.8CVSS8.4AI score0.00757EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•2 views

CVE-2026-2783: Access of Resource Using Incompatible Type

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

7.5CVSS7.3AI score0.00471EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2026/02/24 12:00 a.m.•24 views

Firefox -- Multiple vulnerabilities

CVE-2026-2807: Memory safety bugs present in Firefox 147 and Thunderbird 147 CVE-2026-2806: Uninitialized memory in the Graphics: Text component. CVE-2026-2805: Invalid pointer in the DOM: Core & HTML component. CVE-2026-2804: Use-after-free in the JavaScript: WebAssembly component. CVE-2026-2803...

9.8CVSS7.3AI score0.00757EPSS
SaveExploits4
OSS-Fuzz
OSS-Fuzz
•added 2026/02/12 12:28 p.m.•11 views

php:php-fuzz-function-jit: Heap-use-after-free in i_zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6239113555804160 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7c4f96217bb1 Crash State: izvalptrdtor concatfunction...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/11 2:23 p.m.•3 views

jit-cli (0.1.0), langchain-icosa (>=1.0.0, <=1.1.2) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.2.24)

langchain-core PYPI version 0.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - jit-cli 0.1.0 - langchain-icosa =1.0.0, =1.2.0, =1.2.0, =1.2.6 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

3.7CVSS5.8AI score0.00472EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2026/02/06 11:10 a.m.•42 views

OESA-2026-1285 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in...

9.8CVSS8.1AI score0.00596EPSS
SaveExploits2References23
Redos
Redos
•added 2026/02/03 12:00 a.m.•24 views

ROS-20260203-73-0032

A vulnerability in the bpfjitcomp.c component of the Linux operating system kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS6.3AI score0.00204EPSS
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/01/31 12:43 a.m.•23 views

wamr:wamr_fuzz_llvm_jit: Null-dereference READ in execute_post_instantiate_functions

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4578967146528768 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzllvmjit Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Null-dereference READ Crash...

5.4AI score
SaveExploits0
osv_oesa
osv_oesa
•added 2026/01/30 11:10 a.m.•32 views

OESA-2026-1264 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in...

9.8CVSS7.7AI score0.00596EPSS
SaveExploits2References24
Rows per page
Query Builder