CVE-2026-8091

CriticalCVSS 9.8

Published: 07/05/2026(UTC)Updated: 11/08/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

38th percentile - higher than 38% of all known CVEs

Summary

Incorrect boundary conditions in the Audio/Video: Playback component in Firefox. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.

Risk Assessment

An attacker could exploit this vulnerability to compromise media playback, potentially leading to code execution or data leakage.

Recommendation

Update Firefox, Thunderbird, or Firefox ESR to a version containing the fix.

Original NVD description (English source)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.