CVE-2026-8968

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Denial-of-service vulnerability due to an invalid pointer in the Audio/Video: Web Codecs component. This was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Risk Assessment

Organizations may be exposed to attacks that lead to service unavailability related to audio and video. This can impact the continuity and availability of applications.

Recommendation

It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.