UBUNTU-CVE-2026-124928: Medium severity ubuntu/mozjs52 vulnerability
Published Nov 12, 2026
·Updated
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
Affected Software
10 affected components
ubuntu/mozjs52*
ubuntu/mozjs38*
ubuntu/mozjs68*
ubuntu/mozjs52*
ubuntu/mozjs102*
ubuntu/mozjs78*
ubuntu/mozjs91*
ubuntu/thunderbird*
ubuntu/mozjs102*
ubuntu/mozjs115*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 160
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Ubuntu packages should be reviewed for exposure?
The affected software list includes ubuntu/thunderbird and the Ubuntu mozjs packages mozjs38, mozjs52, mozjs68, mozjs78, mozjs91, mozjs102, and mozjs115.
2
What fixed versions are identified for the affected Mozilla applications?
The vulnerability was fixed in Firefox 160 and Thunderbird 160. The provided data does not specify Ubuntu package version numbers for the listed mozjs packages.