Information Disclosure Vulnerability in Firefox by Mozilla
CVE-2026-2783

6.5MEDIUM

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
24 February 2026

What is CVE-2026-2783?

A vulnerability in the JavaScript Engine's Just-In-Time (JIT) compilation process could lead to unintended information disclosure in affected versions of Firefox and Firefox Extended Support Release (ESR). Specifically, this flaw impacts Firefox versions prior to 148 and Firefox ESR versions before 140.8, allowing attackers to potentially access sensitive information through clever exploitation of the JIT component.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 148

Firefox ESR < 140.8

Thunderbird < 148

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2010943
https://www.mozilla.org/security/advisories/mfsa2026-13/
https://www.mozilla.org/security/advisories/mfsa2026-15/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

x0e
JSON
.