Description JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Exploitability: 3.9 | Impact: 5.9 Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages3 packages
🔴 Vulnerability Details3 GHSA GHSA-3jr5-gwfp-7mfw: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component ↗ 2026-02-24 ▶ OSV CVE-2026-2764: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component ↗ 2026-02-24 ▶ CVEList JIT miscompilation, use-after-free in the JavaScript Engine: JIT component ↗ 2026-02-24 ▶
📋 Vendor Advisories7 Red Hat firefox: thunderbird: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component ↗ 2026-02-24 ▶ Debian CVE-2026-2764: firefox - JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This... ↗ 2026 ▶ Mozilla Mozilla Foundation Security Advisory 2026-16: CVE-2026-2764 ↗ ▶ Mozilla Mozilla Foundation Security Advisory 2026-14: CVE-2026-2764 ↗ ▶ Mozilla Mozilla Foundation Security Advisory 2026-17: CVE-2026-2764 ↗ ▶ Show 2 more
🕵️ Threat Intelligence1 Wiz CVE-2026-2764 Impact, Exploitability, and Mitigation Steps | Wiz ↗ ▶
💬 Community1 Bugzilla CVE-2026-2764 firefox: thunderbird: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component ↗ 2026-02-24 ▶