CVE & CISA-KEV Catalog

CVE-2026-8391

MEDIUM
5.3
CVSS v3
NVD

Description

Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

CWE-20Improper Input ValidationCWE-79Cross-Site Scripting (XSS)CWE-119Buffer OverflowCWE-475

How to fix

Remediation Available
firefoxDebian
Fixed in:150.0.3-1CVE-2026-8391
firefoxRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9.ppc64RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
firefoxRocky
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9.ppc64RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
firefox-debuginfoRocky
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9.ppc64RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
firefox-debuginfoRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9RHSA-2026:26551
Fixed in:0:140.11.0-1.el7_9.ppc64RHSA-2026:26551
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
firefox-debugsourceRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
firefox-debugsourceRocky
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_0RHSA-2026:27715
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el10_2RHSA-2026:21380
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26629
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_10RHSA-2026:21382
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26630
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26606
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
firefox-x11Rocky
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
firefox-x11Red Hat / RHEL
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26493
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21378
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26491
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26492
thunderbirdRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
thunderbirdRocky
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
thunderbird-debuginfoRocky
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
thunderbird-debuginfoRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
thunderbird-debugsourceRocky
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
thunderbird-debugsourceRed Hat / RHEL
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_2RHSA-2026:22325
Fixed in:0:140.11.0-1.el10_0RHSA-2026:26539
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_8RHSA-2026:26268
Fixed in:0:140.11.0-1.el8_4RHSA-2026:26270
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_10RHSA-2026:22643
Fixed in:0:140.11.0-1.el8_6RHSA-2026:26536
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_2RHSA-2026:26269
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_8RHSA-2026:21381
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
Fixed in:0:140.11.0-1.el9_4RHSA-2026:26174
Fixed in:0:140.11.0-1.el9_6RHSA-2026:26521
DeveloperEditionWindows application
Affected:150.0.3Fixed in:150.0.3Mozilla
Mozilla Firefox (en-US)Windows application
Affected:150.0.3Fixed in:150.0.3Mozilla

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityLow
IntegrityNone
AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploit Intelligence

0.30%probability of exploitation in 30 days
21stpercentile

Low risk: more likely to be exploited than 21% of all known CVEs.

References

Vendor Advisory1
Embed a live status badge for CVE-2026-8391
CVE-2026-8391 severity badge

Markdown

[![CVE-2026-8391](https://tridentstack.com/cve/badge/CVE-2026-8391.svg)](https://tridentstack.com/cve/CVE-2026-8391)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-8391"><img src="https://tridentstack.com/cve/badge/CVE-2026-8391.svg" alt="CVE-2026-8391"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-30.