PT-2026-41928 · Mozilla+1 · Thunderbird+2

·

CVE-2026-8974

·

Published

2026-05-19

·

Updated

2026-07-23

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions 140.10 through 150 Thunderbird versions 140.10 through 150
Description Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code.
Recommendations Update Firefox to version 151 or ESR 140.11. Update Thunderbird to version 151 or 140.11.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:21378
ALSA-2026:21380
ALSA-2026:21381
ALSA-2026:21382
ALSA-2026:22325
ALSA-2026:22643
BDU:2026-12893
CVE-2026-8974
OESA-2026-2392
OESA-2026-2393
OESA-2026-2394
OESA-2026-2465
OESA-2026-2756
OPENSUSE-SU-2026:10813-1
OPENSUSE-SU-2026:10863-1
OPENSUSE-SU-2026:10864-1
OPENSUSE-SU-2026:21168-1
RHSA-2026:26174
RHSA-2026:26268
RHSA-2026:26269
RHSA-2026:26270
RHSA-2026:26491
RHSA-2026:26492
RHSA-2026:26493
RHSA-2026:26521
RHSA-2026:26536
RHSA-2026:26539
RHSA-2026:26551
RHSA-2026:26606
RHSA-2026:26629
RHSA-2026:26630
RHSA-2026:27715

Affected Products

Firefox
Rocky Linux
Thunderbird