CVE-2026-8974

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Memory safety bugs are present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption, which could potentially be exploited to run arbitrary code.

Risk Assessment

Organizations may be at risk of attacks that exploit these bugs to gain control over user systems. Exploitation of this vulnerability could lead to serious consequences, including data loss.

Recommendation

It is recommended to update to Firefox 151, Firefox ESR 140.11, Thunderbird 151, or Thunderbird 140.11 to mitigate this vulnerability.

Original NVD description (English source)

Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.