CVE-2026-6758

CVE-2026-6758: Use-after-free in the JavaScript: WebAssembly component

Published April 21, 2026
Last update May 26, 2026

CVSS base score

What the vulnerability does

Description

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

Key dates

Disclosure timeline

April 21, 2026 CVE published
May 26, 2026 Record updated