Threats tagged 'ghsa-8gpq-5x64-h429'

CVE-2026-92021 is a use-after-free vulnerability in the JavaScript Engine's JIT component of mozjs52. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. It has a high impact rating with a CVSS score of 8.8, indicating potential for significant confidentiality, integrity, and availability impact. The vulnerability affects multiple specific versions of mozjs52 as listed, including various Ubuntu package versions. No known exploits in the wild have been reported. The vendor advisory confirms the availability of an official fix.