JavaScript Engine Vulnerability in Firefox Products by Mozilla
CVE-2026-74976

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 18 August 2026

What is CVE-2026-74976?

A vulnerability in the JIT (Just-In-Time) compilation process of the JavaScript engine in Mozilla Firefox creates potential risks for users. This flaw may allow attackers to exploit the JIT component, leading to unexpected behavior or execution of arbitrary code. Mozilla addressed this issue in Firefox version 154 and Firefox ESR versions 140.14 and 153.1, providing crucial updates to enhance security for users.

Affected Version(s)

Firefox 140.14

Firefox 153.1

Firefox 154

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1952164

https://www.mozilla.org/security/advisories/mfsa2026-74/

https://www.mozilla.org/security/advisories/mfsa2026-76/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2026
Vulnerability Reserved
Aug 17, 2026

Credit

anbu

CVE-2026-74976 Data

JSON