PT-2026-38430 · Mozilla+1 · Firefox+1

Andrew Mccreight + 5 · Published 2026-05-07 · Updated 2026-06-29 · CVE-2026-8092

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox version 150.0.1 Firefox ESR version 140.10.1 Firefox ESR version 115.35.1

Description Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code.

Recommendations Update Firefox 150.0.1 to version 150.0.2. Update Firefox ESR 140.10.1 to version 140.10.2. Update Firefox ESR 115.35.1 to version 115.35.2.

Fix

DoS

Use After Free

Memory Corruption

Out of bounds Read

Weakness Enumeration

CWE-416

CWE-787

CWE-125

Related Identifiers

ALSA-2026:19160

ALSA-2026:20566

ALSA-2026:20574

BDU:2026-07463

CVE-2026-8092

OESA-2026-2292

OESA-2026-2349

OESA-2026-2350

OESA-2026-2351

OESA-2026-2352

OPENSUSE-SU-2026:10720-1

OPENSUSE-SU-2026:10737-1

OPENSUSE-SU-2026:10738-1

OPENSUSE-SU-2026:21168-1

RHSA-2026:19160

RHSA-2026:20566

RHSA-2026:20574

RHSA-2026:24508

RHSA-2026:24509

RHSA-2026:24510

RHSA-2026:24511

RHSA-2026:24516

RHSA-2026:24755

RHSA-2026:24983

RHSA-2026:25015

Affected Products

Firefox

Red Os

References · 140

• https://mozilla.org/en-US/security/advisories/mfsa2026-41/#CVE-2026-8092 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-40 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/732057 · Security Note
• https://osv.dev/vulnerability/ALSA-2026:19160 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:20566 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07463 · Security Note
• https://access.redhat.com/errata/RHSA-2026:24755 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8092 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-40 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-42 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-20566.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-8092 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2349 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-44 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/732623 · Security Note