JIT Miscompilation Vulnerability in Firefox by Mozilla
CVE-2026-10702

4.3MEDIUM

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 2 June 2026

Badges

🥇 Trended No. 1📈 Trended📈 Score: 12,600👾 Exploit Exists🟡 Public PoC📰 News Worthy

What is CVE-2026-10702?

CVE-2026-10702 is a vulnerability identified in the Just-In-Time (JIT) compilation component of the JavaScript Engine utilized by Firefox, a widely used web browser developed by Mozilla. The vulnerability arises from a miscompilation error that could enable attackers to execute arbitrary code within the browser's memory space. This flaw poses potential risks to organizations relying on Firefox for secure web browsing, as it could lead to unauthorized access to sensitive information, manipulation of web applications, and compromise of user privacy. The issue was addressed in Firefox version 151.0.3, indicating the urgency with which it needed to be remedied to protect users.

Potential impact of CVE-2026-10702

Remote Code Execution: The vulnerability could permit attackers to execute malicious code on compromised systems, potentially leading to the installation of malware or other harmful actions within the user's environment.
Data Leakage: Exploiting this vulnerability may lead to unauthorized access to personal or sensitive data processed through the browser, thus jeopardizing user privacy and data integrity.
Wider Exploitation Potential: Although not currently reported as being actively exploited, the nature of the vulnerability makes it a candidate for future attacks by threat actors and could be leveraged in broader cyberattack strategies, increasing risks for organizations that fail to update their browser versions promptly.

Affected Version(s)

Firefox 151.0.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-10702
Created by HORKimhab

News Articles

Arabian Post

CVE-2026-10702

Firefox flaw exposes unpatched Tor Browser users

Firefox flaw exposes unpatched Tor Browser users : Latest in - Arabian Post

3 weeks ago

It Security News

CVE-2026-10702

Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw - IT Security News

2026-07-30 07:07 Tor Browser users on unpatched versions may be at risk of compromise simply by visiting a malicious webpage, following the disclosure of CVE-2026-10702, a serious...

3 weeks ago