CVE-2026-8092

Description

Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.

References

https://www.mozilla.org/security/advisories/mfsa2026-44/

https://www.mozilla.org/security/advisories/mfsa2026-43/

https://www.mozilla.org/security/advisories/mfsa2026-42/

https://www.mozilla.org/security/advisories/mfsa2026-41/

https://www.mozilla.org/security/advisories/mfsa2026-40/

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8092.json

https://bugzilla.redhat.com/show_bug.cgi?id=2467708

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1806249%2C2021977%2C2022576%2C2022722%2C2024439%2C2027883%2C2029463%2C2030323%2C2032042%2C2032043%2C2033270%2C2033637%2C2034422%2C2034496%2C2035879%2C2036516

https://access.redhat.com/security/cve/CVE-2026-8092

https://access.redhat.com/errata/RHSA-2026:25015

https://access.redhat.com/errata/RHSA-2026:24983

https://access.redhat.com/errata/RHSA-2026:24755

https://access.redhat.com/errata/RHSA-2026:24516

https://access.redhat.com/errata/RHSA-2026:24511

https://access.redhat.com/errata/RHSA-2026:24510

https://access.redhat.com/errata/RHSA-2026:24509

https://access.redhat.com/errata/RHSA-2026:24508

https://access.redhat.com/errata/RHSA-2026:20574

https://access.redhat.com/errata/RHSA-2026:20566

https://access.redhat.com/errata/RHSA-2026:19160

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS