Sploitus

CVE-2026-2796

9 known exploits for CVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

Affected products
Firefox, Thunderbird
Mozilla Firefox
< 148.0
Mozilla Thunderbird
< 148.0
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
0.6% (48th percentile)
Weakness
CWE-843
NVD status
Modified
Published
2026-02-24
CVE-2026-2796 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2026-2796

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2026-2796-repro
2026-08-27 KitPloitKITPLOIT
CVE-2026-2796
2026-08-27 KitPloitKITPLOIT
CVE-2026-74939-escape-the-mac-n-cheese-box
2026-08-25 KitPloitKITPLOIT
CVE-2026-2796-escape-wasm-by-using-wasm
2026-08-24 KitPloitKITPLOIT
CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box
2026-08-24 KitPloitKITPLOIT
Exploit for Type Confusion in Mozilla Firefox
2026-08-20 SneakyNachosGITHUB
Exploit for Protection Mechanism Failure in Mozilla Firefox
2026-08-20 SneakyNachosGITHUB
Exploit for Type Confusion in Mozilla Firefox
2026-04-09 WostGitGITHUB
Exploit for Type Confusion in Mozilla Firefox
2026-04-09 WostGitGITHUB