UBUNTU-CVE-2026-124940: Medium severity ubuntu/mozjs52 vulnerability
Published Nov 12, 2026
·Updated
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Affected Software
10 affected components
ubuntu/mozjs52*
ubuntu/mozjs38*
ubuntu/mozjs68*
ubuntu/mozjs52*
ubuntu/mozjs102*
ubuntu/mozjs78*
ubuntu/mozjs91*
ubuntu/thunderbird*
ubuntu/mozjs102*
ubuntu/mozjs115*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.7 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Thunderbird ESRto a version that resolves this vulnerability.Fixed in 153.7
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which upstream releases contain the fix?
The issue was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
2
Which Ubuntu packages are listed as affected?
The listed Ubuntu software includes mozjs38, mozjs52, mozjs68, mozjs78, mozjs91, mozjs102, mozjs115, and thunderbird.