Search: CVE-2026-74936

CVE-2026-74936 is a critical use-after-free vulnerability in the JavaScript WebAssembly component of Mozilla Firefox. This flaw allows for potential memory corruption and was fixed in Firefox 154 and Firefox ESR versions 140.14 and 153.1. The vulnerability has a CVSS score of 9.8, indicating high severity with network attack vector, no required privileges or user interaction, and impacts confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor has released official patches to address this issue.