CVE-2026-16410
Critical · 9.8CVSS
9.8
EPSS
0.6%
Published
Jul 21, 2026
CISA due date
—
The record
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-843
- CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-88090 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration… CWE-843
- CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length… CWE-843
- CVE-2026-112659 A type confusion issue was addressed with improved memory handling. CWE-843