JIT Miscompilation in JavaScript Engine Affects Firefox by Mozilla
CVE-2026-16392

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 21 July 2026

What is CVE-2026-16392?

A miscompilation issue within the Just-In-Time (JIT) compilation component of the JavaScript Engine was identified in Firefox. This vulnerability could potentially lead to unexpected behavior or execution of unintended code segments, thereby affecting the overall security integrity of the browser. Mozilla has addressed this vulnerability in the release of Firefox version 153, enhancing the safety and stability of JavaScript execution within the browser.

Affected Version(s)

Firefox 153

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2044606

https://www.mozilla.org/security/advisories/mfsa2026-68/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 20, 2026

Credit

Gary Kwong

CVE-2026-16392 Data

JSON