CVE-2026-100792
UnknownSummary
A JIT miscompilation in the JavaScript: WebAssembly component of Firefox. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
Risk Assessment
JIT miscompilation in WebAssembly may lead to unexpected code execution, potentially enabling remote code execution.
Recommendation
Update Firefox to version 157, Firefox ESR 153.4, or Firefox ESR 140.17 (or later).
Other vulnerabilities in Firefox JavaScript: WebAssembly
See all- CVE-2026-100788Unknown
An invalid pointer in the JavaScript: WebAssembly component of Firefox. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
- CVE-2026-92040High
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
Original NVD description (English source)
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS