PT-2026-40023 · Mozilla+1 · Firefox+1

Ggwhyp

·

CVE-2026-8391

·

Published

2026-05-12

·

Updated

2026-06-29

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 150.0.3
Description An issue exists within the JavaScript Engine component.

Fix

DoS

Buffer Overflow

XSS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-79CWE-20CWE-475

Related Identifiers

ALSA-2026:21378
ALSA-2026:21380
ALSA-2026:21381
ALSA-2026:21382
ALSA-2026:22325
ALSA-2026:22643
BDU:2026-12883
CVE-2026-8391
OESA-2026-2392
OESA-2026-2393
OESA-2026-2394
OESA-2026-2465
OESA-2026-2756
OPENSUSE-SU-2026:10813-1
OPENSUSE-SU-2026:10864-1
OPENSUSE-SU-2026:21168-1
RHSA-2026:26174
RHSA-2026:26268
RHSA-2026:26269
RHSA-2026:26270
RHSA-2026:26491
RHSA-2026:26492
RHSA-2026:26493
RHSA-2026:26521
RHSA-2026:26536
RHSA-2026:26539
RHSA-2026:26551
RHSA-2026:26606
RHSA-2026:26629
RHSA-2026:26630
RHSA-2026:27715

Affected Products

Firefox
Rocky Linux