Threats tagged 'ghsa-85j7-39hr-qwr2'

CVE-2026-92023 is a use-after-free vulnerability in the XML component of the mozjs52 JavaScript engine. This vulnerability has been fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. The vulnerability has a high impact and a CVSS score of 8.8, indicating it can lead to high confidentiality, integrity, and availability impacts. Multiple specific vulnerable versions are identified, including various Ubuntu package versions. The vendor has released official fixes for this issue.