Package · Ubuntu

mozjs38

1,742 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

High 8.1

CVE-2026-109722 Public exploit

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 13, 2026
High 8.1

CVE-2026-109715 Public exploit

Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 13, 2026
High 8.8

CVE-2026-74939 Public exploit

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Aug 18, 2026
High 8.8

CVE-2026-8389 Public exploit

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi

May 12, 2026
High 7.3

CVE-2025-14325 Public exploit

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Dec 9, 2025
High 8.8

CVE-2023-5217 Exploited Public exploit EPSS 49%

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm

Sep 28, 2023
KEV Oct 2, 2023
High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021