9.8
CVE-2026-4698
- EPSS 0.76%
- Veröffentlicht 24.03.2026 12:30:27
- Zuletzt bearbeitet 30.06.2026 03:20:39
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
JIT miscompilation in the JavaScript Engine: JIT component
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.76% | 0.505 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-733 Compiler Optimization Removal or Modification of Security-critical Code
The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
https://www.mozilla.org/security/advisories/mfsa2026-20/
https://www.mozilla.org/security/advisories/mfsa2026-21/
https://www.mozilla.org/security/advisories/mfsa2026-22/
https://bugzilla.mozilla.org/show_bug.cgi?id=2020906
https://www.mozilla.org/security/advisories/mfsa2026-23/
https://www.mozilla.org/security/advisories/mfsa2026-24/
https://access.redhat.com/errata/RHSA-2026:5930
https://access.redhat.com/errata/RHSA-2026:5931
https://access.redhat.com/errata/RHSA-2026:5932
https://access.redhat.com/errata/RHSA-2026:6188
https://access.redhat.com/errata/RHSA-2026:6342
https://access.redhat.com/errata/RHSA-2026:6917
https://access.redhat.com/errata/RHSA-2026:7837
https://access.redhat.com/errata/RHSA-2026:7838
https://access.redhat.com/errata/RHSA-2026:7839
https://access.redhat.com/errata/RHSA-2026:7840
https://access.redhat.com/errata/RHSA-2026:7841
https://access.redhat.com/errata/RHSA-2026:7842
https://access.redhat.com/errata/RHSA-2026:7843
https://access.redhat.com/errata/RHSA-2026:7845
https://access.redhat.com/errata/RHSA-2026:7858
https://access.redhat.com/errata/RHSA-2026:8284
https://access.redhat.com/errata/RHSA-2026:8285
https://access.redhat.com/errata/RHSA-2026:8286
https://access.redhat.com/errata/RHSA-2026:8287
https://access.redhat.com/errata/RHSA-2026:8288
https://access.redhat.com/errata/RHSA-2026:8289
https://access.redhat.com/errata/RHSA-2026:8290
https://access.redhat.com/errata/RHSA-2026:8315
https://access.redhat.com/errata/RHSA-2026:8427
https://access.redhat.com/errata/RHSA-2026:8850
https://access.redhat.com/security/cve/CVE-2026-4698
https://bugzilla.redhat.com/show_bug.cgi?id=2450719
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4698.json