547 matches found
CVE-2026-2764-but-with-wasm
CVE-2026-2764, but with wasm Status: analysis + validated PoC. Primitive weaponization in progress. A WasmBlazeFox-style chain built on a 2026 bug this time: CVE-2026-2764, an IonMonkey/baseline "JIT miscompilation + use-after-free" in the JavaScript Engine: JIT component, fixed in Firefox 148 MF...
CVE-2026-2766-but-with-wasm
CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...
CVE-2026-10702
CVE-2026-10702 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as...
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
SUSE-SU-2026:4736-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
CVE-2026-100792
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Ha...
CVE-2026-100793
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
UBUNTU-CVE-2026-109720
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109720
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
UBUNTU-CVE-2026-109722
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109733
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
SUSE CVE-2026-109720
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
SUSE CVE-2026-109722
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
SUSE CVE-2026-109733
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109733
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109720
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...