CVE-2026-8090

Summary

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox115.35.2 <= 115.*unaffected
MozillaFirefox140.10.2 <= 140.*unaffected
MozillaFirefox150.0.2 <= *unaffected
MozillaThunderbird140.10.2 <= 140.*unaffected
MozillaThunderbird150.0.2 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

firefox: thunderbird: Use-after-free in the DOM: Networking component

Additional References

References