JavaScript Engine Vulnerability in Firefox by Mozilla
CVE-2026-100814

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-100814?

A flaw in the JavaScript Engine's Just-In-Time (JIT) component has been identified, which results from incorrect boundary conditions. This vulnerability could potentially allow for unexpected behaviors, affecting the stability and security of the Firefox browser. Users are encouraged to update to Firefox ESR 153.4 or Firefox 157 to mitigate any risks associated with this vulnerability.

Affected Version(s)

Firefox 153.4

Firefox 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2068385

https://www.mozilla.org/security/advisories/mfsa2026-100/

https://www.mozilla.org/security/advisories/mfsa2026-97/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 26, 2026

Credit

Mozilla

CVE-2026-100814 Data

JSON