Vulnerability intelligence

CVE-2026-6758

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

CVSS Score

7.5

High

EPSS — Exploit Probability

0.4%

Riskier than 35% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

1 article across 1 outlet · first covered Apr 22, 2026 · latest Apr 22, 2026

Coverage timeline