Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-110715

CVE-2026-110715MEDIUM

Artifex Software MuJS — MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   N   P   N   L   H    6.9   .0017    6.2     —

AFFECTED
  Product  Versions  Fixed
  MuJS     1.3.6 –   —

TIMELINE
  Oct 14  EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.
  Oct 14  Reserved by VulnCheck
  Oct 14  Published (CNA: VulnCheck)
  Oct 15  EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.

CWE-787 · CNA: VulnCheck · CVSS v4.0 · 6 references · NVD status: Deferred

Description

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap_sort_cmp and Ap_sort_swap to access slots past the buffer and crash the process.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
October 14, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.
October 14, 2026	Reserved	Reserved by VulnCheck
October 14, 2026	Published	Published (CNA: VulnCheck)
October 15, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Artifex Software	MuJS	—	1.3.6	—

Weaknesses

CWE-787

References (6)

Authoritative record: CVE-2026-110715 at cve.org

Vendors: artifex software

Weaknesses: CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-110715 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.