CVE-2026-109761

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox and Thunderbird . This flaw was addressed in versions 158 of both products. Specific details regarding the root cause or exploitability are not provided in the documentation.