7.5
High
CVE-2026-2801 Incorrect boundary conditions in the JavaScript: WebAssembly component
Description
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 148 | earliest → < 148 | 148 |
| Thunderbird 148 | earliest → < 148 | 148 |