CVE-2026-2767
CRITICALFirefox < 148.0 and Firefox ESR < 140.8.0 - Use-After-Free in JavaScript WebAssembly Component
Title source: llmDescription
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
References (33)
Core 33
Core References
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=2013741
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-13/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-15/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-16/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-17/
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3338
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3339
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3361
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3491
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3492
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3493
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3494
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3495
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3496
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3497
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3515
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3516
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3517
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3976
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3978
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3979
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3980
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3981
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3982
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3983
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3984
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:4022
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:4152
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:4260
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:4432
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-2767
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2442328
Scores
CVSS v3
9.8
EPSS
0.0038
EPSS Percentile
30.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-416
Status
published
Products (8)
mozilla/firefox
< 140.8.0
mozilla/firefox
< 148.0
Mozilla/Firefox
140.8 - 140.*
Mozilla/Firefox
148
mozilla/thunderbird
< 140.8.0
mozilla/thunderbird
< 148.0
Mozilla/Thunderbird
140.8 - 140.*
Mozilla/Thunderbird
148
Published
Feb 24, 2026
Tracked Since
Feb 24, 2026