CVE-2026-16410

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

JIT miscompilation in the JavaScript Engine leads to incorrect code generation. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

An attacker could exploit this bug to execute arbitrary code remotely or compromise data confidentiality.

Update Firefox to version 153 and Thunderbird to version 153.

Original NVD description (English source)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.