How severe is CVE-2026-0884?

CVE-2026-0884 has a CVSS v3 score of 9.8 (CRITICAL).

CVE-2026-0884

9.8CRITICAL

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 147 and Firefox ESR < 140.7.

Published: 1/13/2026Updated: 1/15/2026

Description

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.

AI AnalysisPowered by AI

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2003588
https://www.mozilla.org/security/advisories/mfsa2026-01/
https://www.mozilla.org/security/advisories/mfsa2026-03/
https://www.mozilla.org/security/advisories/mfsa2026-04/
https://www.mozilla.org/security/advisories/mfsa2026-05/