Threats tagged 'ghsa-gcxv-gv82-5hp5'

CVE-2026-92022 is a use-after-free vulnerability in the DOM: HTML Parser component of mozjs52, affecting Firefox and Thunderbird products. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. The vulnerability has a high impact and a CVSS score of 8.8, indicating it can lead to high confidentiality, integrity, and availability impacts. Multiple specific vulnerable versions are identified, including various Ubuntu package versions. The vendor has released official fixes for this issue.