Home

Description

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

PUBLISHED Reserved 2026-03-23 | Published 2026-03-24 | Updated 2026-04-13 | Assigner mozilla

Product status

140.9 (rpm)
unaffected

149 (rpm)
unaffected

140.9 (rpm)
unaffected

149 (rpm)
unaffected

Credits

Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, Daniel Freeman, Alex Gaynor, and Joel Weinberger using Claude from Anthropic

References

bugzilla.mozilla.org/show_bug.cgi?id=2013560

www.mozilla.org/security/advisories/mfsa2026-20/

www.mozilla.org/security/advisories/mfsa2026-22/

www.mozilla.org/security/advisories/mfsa2026-23/

www.mozilla.org/security/advisories/mfsa2026-24/

cve.org (CVE-2026-4702)

nvd.nist.gov (CVE-2026-4702)

Download JSON