UBUNTU-CVE-2026-118008: High severity ubuntu/mozjs52 vulnerability

Published Oct 27, 2026

Updated

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Affected Software

10 affected components

ubuntu/mozjs52*

ubuntu/mozjs38*

ubuntu/mozjs68*

ubuntu/mozjs52*

ubuntu/mozjs102*

ubuntu/mozjs78*

ubuntu/mozjs91*

ubuntu/thunderbird*

ubuntu/mozjs102*

ubuntu/mozjs115*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 159
Upgrade
Upgrade Thunderbird to a version that resolves this vulnerability.
Fixed in 159

Event History

Oct 27, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attack can be carried out over the network with low attack complexity and requires no prior privileges. User interaction is required.

What is the potential impact if exploitation succeeds?

The vulnerability is rated high severity with high impact to confidentiality, integrity, and availability. The scope is unchanged.

Which affected software entries should be reviewed?

The listed Ubuntu software entries are mozjs38, mozjs52, mozjs68, mozjs78, mozjs91, mozjs102, mozjs115, and thunderbird. The available fix information states that Firefox 159 and Thunderbird 159 contain the fix.

UBUNTU-CVE-2026-118008: High severity ubuntu/mozjs52 vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which affected software entries should be reviewed?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which affected software entries should be reviewed?