Mozjs52: [Unknown description] (CVE-2026-84132)

CVE-2026-84132 is an information disclosure vulnerability in the Networking: HTTP component of Mozilla Firefox. It was identified through internal testing and fixed in Firefox 155 and Firefox ESR 153.2. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates that the vulnerability can be exploited remotely over the network without privileges or user interaction, resulting in high confidentiality impact but no impact on integrity or availability. The vendor advisory groups this vulnerability among multiple security issues fixed in Firefox 155 and Firefox ESR 153.2. No specific technical details or exploitation methods are provided beyond the classification as information disclosure.

Successful exploitation of CVE-2026-84132 could lead to disclosure of sensitive information via the Networking: HTTP component in affected Firefox versions. The vulnerability does not affect integrity or availability. There are no known exploits in the wild. The CVSS score of 7.5 reflects a high confidentiality impact with no required privileges or user interaction for exploitation.

This vulnerability is fixed in Firefox 155 and Firefox ESR 153.2. Users and administrators should update to these versions or later to remediate the issue. There are no vendor advisories indicating that no action is required or that the issue is already mitigated by other means. Patch status is confirmed by the Mozilla security advisories MFSA 2026-82 and MFSA 2026-85.