PT-2026-41903

CVE-2026-8949

·

Published

2026-05-19

·

Updated

2026-06-29

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 151 Firefox ESR versions prior to 140.11 Thunderbird versions prior to 151 Thunderbird versions prior to 140.11
Description An integer overflow exists in the Widget: Win32 component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.
Recommendations Update to version 151 Update to version 140.11 Update to version 151 Update to version 140.11
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OESA-2026-2392
OESA-2026-2393
OESA-2026-2394
OESA-2026-2465
OESA-2026-2756
OPENSUSE-SU-2026:10813-1
OPENSUSE-SU-2026:10863-1
OPENSUSE-SU-2026:10864-1
OPENSUSE-SU-2026:21168-1
Found an issue in the description? Have something to add? Feel free to write us 👾