Threats tagged 'ghsa-qm5r-cp4c-rchw'

CVE-2026-92028 is a use-after-free vulnerability in the DOM: Core & HTML component of the mozjs52 engine. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. The vulnerability has a high impact with a CVSS score of 8.8, indicating it can lead to high confidentiality, integrity, and availability impacts. The vendor advisory confirms the issue is addressed in the specified fixed versions.