Use-After-Free Vulnerability in JavaScript Engine by Mozilla

CVE-2026-6754

What is CVE-2026-6754?

A use-after-free vulnerability in the JavaScript Engine of Mozilla Firefox can lead to unexpected behaviors, including the possibility of process crashes or potentially arbitrary code execution. This flaw occurs due to improper memory management, allowing previously freed memory to be accessed. The issue has been addressed in several updates, specifically in Firefox versions 150, 115.35 ESR, and 140.10 ESR, highlighting the importance of keeping browsers updated to mitigate security risks.

References