Use-After-Free Vulnerability in JavaScript: WebAssembly Component of Firefox by Mozilla
CVE-2026-92040

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 15 September 2026

What is CVE-2026-92040?

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox. This flaw can be exploited in various ways, potentially leading to memory corruption and unauthorized access, thereby posing significant security risks. The issue has been addressed in Firefox version 156, which rectifies the flaw and helps enhance overall browser stability.

Affected Version(s)

Firefox 156

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2024248

https://www.mozilla.org/security/advisories/mfsa2026-90/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 15, 2026
Vulnerability Reserved
Sep 15, 2026

Credit

Mozilla

CVE-2026-92040 Data

JSON