Findings

CVE-2026-109733

JIT miscompilation in the JavaScript Engine: JIT component

Published Oct 13, 2026 · updated Oct 15, 2026 · Mozilla Firefox

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · CIRCL Vulnerability Lookup

    Detected

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  2. Oct 15, 2026 · CIRCL Vulnerability Lookup

    Updated

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Affected

  • vendor Mozilla Firefoxversion unspecified
  • vendor Mozilla Thunderbirdversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-109733

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-109733

    Official CVE identifier

    cve.org

References