CoreCVE
Back

CRITICAL

Invalid pointer in the JavaScript: WebAssembly component

Published Sep 29, 2026

Description

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-824

References (7)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mozilla
Published Sep 29, 2026
Updated Oct 1, 2026
Reserved Sep 26, 2026
Link CVE-2026-100788
CISA Vulnrichment
Updated Oct 1, 2026
NVD
Status Received
Modified Sep 29, 2026
Link CVE-2026-100788
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-100788