CVE-2026-100817

Analyzed Analyzed - Analysis Complete

Memory Corruption in Firefox JavaScript WebAssembly

Publication date: 2026-09-29

Last updated on: 2026-10-06

Assigner: Mozilla Corporation

Description

Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-06

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100817

EUVD

EUVD-2026-88796

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	to 157.0.0 (exc)
mozilla	thunderbird	to 157.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a security issue in the JavaScript: WebAssembly component of Firefox. It was addressed in Firefox version 157, but specific technical details are not provided in the available context.

Detection Guidance

Detection methods or specific commands for this vulnerability are not provided in the available CVE data. General advice would be to check Firefox version and ensure it is updated to 157 or later.

Impact Analysis

The impact depends on the nature of the vulnerability, which is not detailed here. Users of Firefox versions before 157 may be at risk if the flaw allows unauthorized access, data breaches, or other malicious activities.

Compliance Impact

Without specific details on the vulnerability's nature, it is unclear how it directly impacts compliance. However, if the flaw leads to data exposure or unauthorized access, it could potentially violate GDPR or HIPAA requirements for data protection.

Mitigation Strategies

Update Firefox to version 157 or later to address the vulnerability in the JavaScript: WebAssembly component.

Hi! I’m here to help you understand CVE-2026-100817. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70