CVE-2026-10702

MEDIUM

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

CVSS v3.1 Score

4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Published: 6/2/2026Modified: 7/22/2026

Related Intelligence (1)

MEDIUMVulnerability

Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser. Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update. "No settings or additional user interaction are required," Eten Zou,

CVE-2026-10702
The Hacker News

References (5)

https://bugzilla.mozilla.org/show_bug.cgi?id=2040903Permissions Requiredhttps://www.mozilla.org/security/advisories/mfsa2026-54/Vendor Advisoryhttps://access.redhat.com/security/cve/CVE-2026-10702https://bugzilla.redhat.com/show_bug.cgi?id=2484118https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10702.json