CVE-2026-100788
UnknownSummary
An invalid pointer in the JavaScript: WebAssembly component of Firefox. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
Risk Assessment
An invalid pointer may lead to a crash or arbitrary code execution, potentially enabling remote code execution.
Recommendation
Update Firefox to version 157, Firefox ESR 153.4, or Firefox ESR 140.17 (or later).
Other vulnerabilities in Firefox JavaScript: WebAssembly
See all- CVE-2026-100792Unknown
A JIT miscompilation in the JavaScript: WebAssembly component of Firefox. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
- CVE-2026-92040High
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
Original NVD description (English source)
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS