WebAssembly Component Vulnerability in Firefox by Mozilla
CVE-2026-100817

5.4MEDIUM

Key Information:

Vendor

Mozilla
Status
Thunderbird
Firefox
Vendor
CVE Published:
29 September 2026

What is CVE-2026-100817?

A vulnerability was identified in the JavaScript: WebAssembly component of Mozilla's Firefox browser. This issue could potentially impact the browser's security, leading to unforeseen consequences for users. The vulnerability was addressed in Firefox version 157, emphasizing the importance of keeping your browser up to date to protect against such security risks. For further details, refer to Mozilla's security advisories.

Affected Version(s)

Firefox 157

Thunderbird 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2068670
https://www.mozilla.org/security/advisories/mfsa2026-101/
https://www.mozilla.org/security/advisories/mfsa2026-97/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.