PT-2026-38428
CVE-2026-8090
·
Published
2026-05-07
·
Updated
2026-10-22
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 150.0.2
Firefox ESR versions prior to 140.10.2
Firefox ESR versions prior to 115.35.2
Thunderbird versions prior to 150.0.2
Thunderbird versions prior to 140.10.2
Description
A use-after-free issue exists within the DOM Networking component. A use-after-free occurs when an application continues to use a pointer after it has been freed, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
Update to version 150.0.2 or newer.
Update to version 140.10.2 or newer.
Update to version 115.35.2 or newer.
Update to version 150.0.2 or newer.
Update to version 140.10.2 or newer.
Found an issue in the description? Have something to add? Feel free to write us 👾