PT-2026-77009 · Mozilla+1 · Firefox+2

·

CVE-2026-74976

·

Published

2026-08-18

·

Updated

2026-09-08

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1
Description A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method of improving program execution speed by compiling code during runtime rather than before execution.
Recommendations Update Firefox to version 154 or later. Update Firefox ESR to version 140.14 or later. Update Firefox ESR to version 153.1 or later. Update Thunderbird to version 154 or later. Update Thunderbird to version 140.14 or later. Update Thunderbird to version 153.1 or later.

Fix

DoS

Type Confusion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:58897
ALSA-2026:58898
ALSA-2026:58899
ALSA-2026:65158
ALSA-2026:65159
ALSA-2026:65160
CVE-2026-74976
OESA-2026-3556
OESA-2026-3557
OESA-2026-3558
OESA-2026-3559
OESA-2026-3576
OESA-2026-3577
OPENSUSE-SU-2026:11546-1
OPENSUSE-SU-2026:11558-1
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:21594-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23304-1
SUSE-SU-2026:23411-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:3897-1

Affected Products

Firefox
Rocky Linux
Thunderbird