Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-16369: Firefox JavaScript Engine WebAssembly Overflow Risk

CVE-2026-16369 CVE-2026-16369

Summary

An integer overflow in Firefox's JavaScript engine could cause a crash or potentially allow an attacker to execute malicious code. This vulnerability has been fixed in Firefox 153 and Firefox ESR 140.13, so updating to the latest version is recommended to prevent potential issues.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	All versions

Original title

Integer overflow in the JavaScript: WebAssembly component

Original description

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.

Vulnerability type

CWE-190 Integer Overflow

https://bugzilla.mozilla.org/show_bug.cgi?id=2051854
https://www.mozilla.org/security/advisories/mfsa2026-68/
https://www.mozilla.org/security/advisories/mfsa2026-70/

Published: 21 Jul 2026 · Updated: 23 Jul 2026 · First seen: 21 Jul 2026