Mozjs52: [Unknown description] (CVE-2026-84130)

CVE-2026-84130 is an information disclosure vulnerability affecting the Graphics: WebGPU component in Mozilla Firefox. It was reported by researcher 5up3rh3i and is classified with moderate impact. The vulnerability was fixed in Firefox 155 and Firefox ESR 153.2 as part of a broader security update addressing multiple memory corruption and security defects. The CVSS 3.1 vector indicates the flaw can be exploited remotely without privileges or user interaction, leading to confidentiality loss. The Mozilla advisories MFSA2026-82 and MFSA2026-85 provide detailed references and confirm the fix availability.

The vulnerability allows an attacker to remotely disclose information in the Graphics: WebGPU component, potentially exposing sensitive data. The CVSS score of 7.5 reflects a significant confidentiality impact without affecting integrity or availability. No known exploits in the wild have been reported. The vulnerability requires no privileges or user interaction to exploit, increasing its risk profile. However, the vendor has released patches that mitigate this risk.

Official fixes for CVE-2026-84130 are available in Mozilla Firefox 155 and Firefox ESR 153.2. Users and administrators should upgrade to these versions or later to remediate the vulnerability. No additional mitigation actions are required as the issue is addressed by the vendor's security update.