PT-2026-38428 · Mozilla+1 · Firefox+1

Kevin Brosnan · CVE-2026-8090 · Published 2026-05-07 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 150.0.2 Firefox ESR versions prior to 140.10.2 Firefox ESR versions prior to 115.35.2

Description A use-after-free issue exists in the DOM: Networking component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update to version 150.0.2 Update to ESR version 140.10.2 Update to ESR version 115.35.2

Fix

DoS

Use After Free

Weakness Enumeration

CWE-825

CWE-416

Related Identifiers

ALSA-2026:19160

ALSA-2026:20566

ALSA-2026:20574

BDU:2026-07923

CVE-2026-8090

OESA-2026-2292

OESA-2026-2349

OESA-2026-2350

OESA-2026-2351

OESA-2026-2352

OPENSUSE-SU-2026:10720-1

OPENSUSE-SU-2026:10737-1

OPENSUSE-SU-2026:10738-1

OPENSUSE-SU-2026:21168-1

RHSA-2026:19160

RHSA-2026:20566

RHSA-2026:20574

RHSA-2026:24508

RHSA-2026:24509

RHSA-2026:24510

RHSA-2026:24511

RHSA-2026:24516

RHSA-2026:24755

RHSA-2026:24983

RHSA-2026:25015

Affected Products

Firefox

Red Os

References · 139

• https://osv.dev/vulnerability/OESA-2026-2292 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:24509 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-20566.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-8090 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-20574.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10720-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-44 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-42 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-41 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-20574.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8094 · Security Note
• https://bdu.fstec.ru/vul/2026-07923 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2352 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19160 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:24511 · Vendor Advisory