Use-After-Free in JavaScript Component of Firefox by Mozilla
CVE-2026-100796

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-100796?

A use-after-free vulnerability exists in the JavaScript component of Firefox's WebAssembly, allowing attackers to exploit freed memory blocks. This can potentially lead to arbitrary code execution or information disclosure. Mozilla has addressed this issue in Firefox version 157, emphasizing the importance of keeping software updated to mitigate security risks.

Affected Version(s)

Firefox 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2049604

https://www.mozilla.org/security/advisories/mfsa2026-97/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 26, 2026

Credit

SecBuddyF, Tencent KeenLab (CodeBuddy Security)

CVE-2026-100796 Data

JSON