8.8
High
CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component
Description
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 140.16 | earliest → < 140.16 | 140.16 |
| Thunderbird 140.16 | earliest → < 140.16 | 140.16 |