Use-after-free in the JavaScript: WebAssembly component
Published Feb 24, 2026
9.8
CRITICALCVSS 3.1
EPSS 0.60%
Description
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Affected products
No data.
- < 140.8.0
- < 148.0
- < 140.8.0
- < 148.0
No data.
Red Hat Enterprise Linux 10
firefox-0:140.8.0-2.el10_1
Fixed · RHSA-2026:3361
Red Hat Enterprise Linux 10
thunderbird-0:140.8.0-2.el10_1
Fixed · RHSA-2026:3517
Red Hat Enterprise Linux 10.0 Extended Update Support
firefox-0:140.8.0-2.el10_0
Fixed · RHSA-2026:3976
Red Hat Enterprise Linux 10.0 Extended Update Support
thunderbird-0:140.8.0-2.el10_0
Fixed · RHSA-2026:4260
Red Hat Enterprise Linux 7 Extended Lifecycle Support
firefox-0:140.8.0-2.el7_9
Fixed · RHSA-2026:3984
Red Hat Enterprise Linux 8
firefox-0:140.8.0-2.el8_10
Fixed · RHSA-2026:3338
Red Hat Enterprise Linux 8
thunderbird-0:140.8.0-1.el8_10
Fixed · RHSA-2026:3515
Red Hat Enterprise Linux 8.2 Advanced Update Support
firefox-0:140.8.0-2.el8_2
Fixed · RHSA-2026:3492
Red Hat Enterprise Linux 8.2 Advanced Update Support
thunderbird-0:140.8.0-1.el8_2
Fixed · RHSA-2026:4432
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:140.8.0-2.el8_4
Fixed · RHSA-2026:3491
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:140.8.0-2.el8_4
Fixed · RHSA-2026:3980
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
firefox-0:140.8.0-2.el8_4
Fixed · RHSA-2026:3491
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
thunderbird-0:140.8.0-2.el8_4
Fixed · RHSA-2026:3980
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
firefox-0:140.8.0-2.el8_6
Fixed · RHSA-2026:3495
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:140.8.0-1.el8_6
Fixed · RHSA-2026:3979
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
firefox-0:140.8.0-2.el8_6
Fixed · RHSA-2026:3495
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:140.8.0-1.el8_6
Fixed · RHSA-2026:3979
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
firefox-0:140.8.0-2.el8_6
Fixed · RHSA-2026:3495
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:140.8.0-1.el8_6
Fixed · RHSA-2026:3979
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
firefox-0:140.8.0-2.el8_8
Fixed · RHSA-2026:3494
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
thunderbird-0:140.8.0-1.el8_8
Fixed · RHSA-2026:4022
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
firefox-0:140.8.0-2.el8_8
Fixed · RHSA-2026:3494
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
thunderbird-0:140.8.0-1.el8_8
Fixed · RHSA-2026:4022
Red Hat Enterprise Linux 9
firefox-0:140.8.0-2.el9_7
Fixed · RHSA-2026:3339
Red Hat Enterprise Linux 9
thunderbird-0:140.8.0-1.el9_7
Fixed · RHSA-2026:3516
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
firefox-0:140.8.0-2.el9_0
Fixed · RHSA-2026:3493
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:140.8.0-1.el9_0
Fixed · RHSA-2026:3983
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
firefox-0:140.8.0-2.el9_2
Fixed · RHSA-2026:4152
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
thunderbird-0:140.8.0-1.el9_2
Fixed · RHSA-2026:3978
Red Hat Enterprise Linux 9.4 Extended Update Support
firefox-0:140.8.0-2.el9_4
Fixed · RHSA-2026:3496
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:140.8.0-1.el9_4
Fixed · RHSA-2026:3981
Red Hat Enterprise Linux 9.6 Extended Update Support
firefox-0:140.8.0-2.el9_6
Fixed · RHSA-2026:3497
Red Hat Enterprise Linux 9.6 Extended Update Support
thunderbird-0:140.8.0-1.el9_6
Fixed · RHSA-2026:3982
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Affected
Red Hat Enterprise Linux 10
rhel10/thunderbird-flatpak
Affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox-0:140.8.0-2.el10_1 | Fixed | RHSA-2026:3361 |
| Red Hat Enterprise Linux 10 | thunderbird-0:140.8.0-2.el10_1 | Fixed | RHSA-2026:3517 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | firefox-0:140.8.0-2.el10_0 | Fixed | RHSA-2026:3976 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird-0:140.8.0-2.el10_0 | Fixed | RHSA-2026:4260 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | firefox-0:140.8.0-2.el7_9 | Fixed | RHSA-2026:3984 |
| Red Hat Enterprise Linux 8 | firefox-0:140.8.0-2.el8_10 | Fixed | RHSA-2026:3338 |
| Red Hat Enterprise Linux 8 | thunderbird-0:140.8.0-1.el8_10 | Fixed | RHSA-2026:3515 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | firefox-0:140.8.0-2.el8_2 | Fixed | RHSA-2026:3492 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | thunderbird-0:140.8.0-1.el8_2 | Fixed | RHSA-2026:4432 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:140.8.0-2.el8_4 | Fixed | RHSA-2026:3491 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:140.8.0-2.el8_4 | Fixed | RHSA-2026:3980 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | firefox-0:140.8.0-2.el8_4 | Fixed | RHSA-2026:3491 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird-0:140.8.0-2.el8_4 | Fixed | RHSA-2026:3980 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | firefox-0:140.8.0-2.el8_6 | Fixed | RHSA-2026:3495 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:140.8.0-1.el8_6 | Fixed | RHSA-2026:3979 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | firefox-0:140.8.0-2.el8_6 | Fixed | RHSA-2026:3495 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:140.8.0-1.el8_6 | Fixed | RHSA-2026:3979 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | firefox-0:140.8.0-2.el8_6 | Fixed | RHSA-2026:3495 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:140.8.0-1.el8_6 | Fixed | RHSA-2026:3979 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | firefox-0:140.8.0-2.el8_8 | Fixed | RHSA-2026:3494 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | thunderbird-0:140.8.0-1.el8_8 | Fixed | RHSA-2026:4022 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | firefox-0:140.8.0-2.el8_8 | Fixed | RHSA-2026:3494 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | thunderbird-0:140.8.0-1.el8_8 | Fixed | RHSA-2026:4022 |
| Red Hat Enterprise Linux 9 | firefox-0:140.8.0-2.el9_7 | Fixed | RHSA-2026:3339 |
| Red Hat Enterprise Linux 9 | thunderbird-0:140.8.0-1.el9_7 | Fixed | RHSA-2026:3516 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | firefox-0:140.8.0-2.el9_0 | Fixed | RHSA-2026:3493 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:140.8.0-1.el9_0 | Fixed | RHSA-2026:3983 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | firefox-0:140.8.0-2.el9_2 | Fixed | RHSA-2026:4152 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | thunderbird-0:140.8.0-1.el9_2 | Fixed | RHSA-2026:3978 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | firefox-0:140.8.0-2.el9_4 | Fixed | RHSA-2026:3496 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:140.8.0-1.el9_4 | Fixed | RHSA-2026:3981 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | firefox-0:140.8.0-2.el9_6 | Fixed | RHSA-2026:3497 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | thunderbird-0:140.8.0-1.el9_6 | Fixed | RHSA-2026:3982 |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (38)
- https://access.redhat.com/errata/RHSA-2026:3338
- https://access.redhat.com/errata/RHSA-2026:3339
- https://access.redhat.com/errata/RHSA-2026:3361
- https://access.redhat.com/errata/RHSA-2026:3491
- https://access.redhat.com/errata/RHSA-2026:3492
- https://access.redhat.com/errata/RHSA-2026:3493
- https://access.redhat.com/errata/RHSA-2026:3494
- https://access.redhat.com/errata/RHSA-2026:3495
- https://access.redhat.com/errata/RHSA-2026:3496
- https://access.redhat.com/errata/RHSA-2026:3497
- https://access.redhat.com/errata/RHSA-2026:3515
- https://access.redhat.com/errata/RHSA-2026:3516
- https://access.redhat.com/errata/RHSA-2026:3517
- https://access.redhat.com/errata/RHSA-2026:3976
- https://access.redhat.com/errata/RHSA-2026:3978
- https://access.redhat.com/errata/RHSA-2026:3979
- https://access.redhat.com/errata/RHSA-2026:3980
- https://access.redhat.com/errata/RHSA-2026:3981
- https://access.redhat.com/errata/RHSA-2026:3982
- https://access.redhat.com/errata/RHSA-2026:3983
- https://access.redhat.com/errata/RHSA-2026:3984
- https://access.redhat.com/errata/RHSA-2026:4022
- https://access.redhat.com/errata/RHSA-2026:4152
- https://access.redhat.com/errata/RHSA-2026:4260
- https://access.redhat.com/errata/RHSA-2026:4432
- https://access.redhat.com/security/cve/CVE-2026-2767 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=2013741 Issue TrackingPermissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2442328 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8488 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-2767
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2767.json
- https://www.cve.org/CVERecord?id=CVE-2026-2767
- https://www.mozilla.org/security/advisories/mfsa2026-13/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-15/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2767
- https://www.mozilla.org/security/advisories/mfsa2026-16/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-17/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2767
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data