← back
CVE-2026-8092

Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2

CVSS 8.1 HIGHEPSS 0.4%CWE-125CWE-416CWE-787
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.1EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
07 May 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Mozilla · FirefoxMozilla · Thunderbird

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/errata/RHSA-2026:19160https://access.redhat.com/errata/RHSA-2026:20566https://access.redhat.com/errata/RHSA-2026:20574https://access.redhat.com/errata/RHSA-2026:24508https://access.redhat.com/errata/RHSA-2026:24509https://access.redhat.com/errata/RHSA-2026:24510https://access.redhat.com/errata/RHSA-2026:24511https://access.redhat.com/errata/RHSA-2026:24516https://access.redhat.com/errata/RHSA-2026:24755https://access.redhat.com/errata/RHSA-2026:24983https://access.redhat.com/errata/RHSA-2026:25015https://access.redhat.com/security/cve/CVE-2026-8092