How severe is CVE-2026-0884?

CVE-2026-0884 has a CVSS v3 score of 9.8 (CRITICAL).

CVE-2026-0884

9.8CRITICAL

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 147 and Firefox ESR < 140.7.

Veröffentlicht: 1/13/2026Aktualisiert: 1/15/2026

Beschreibung

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.

KI-AnalyseKI-gestützt

Referenzen

https://bugzilla.mozilla.org/show_bug.cgi?id=2003588
https://www.mozilla.org/security/advisories/mfsa2026-01/
https://www.mozilla.org/security/advisories/mfsa2026-03/
https://www.mozilla.org/security/advisories/mfsa2026-04/
https://www.mozilla.org/security/advisories/mfsa2026-05/