PT-2026-40021 · Mozilla · Firefox

Ggwhyp · Published 2026-05-12 · Updated 2026-06-05 · CVE-2026-8389

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 150.0.3

Description JIT miscompilation occurs within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method used to improve the execution speed of programs by compiling code during runtime rather than before execution.

Recommendations Update to version 150.0.3.

Exploit

Fix

Type Confusion

Buffer Overflow

Weakness Enumeration

CWE-686

CWE-843

CWE-119

Related Identifiers

CVE-2026-8389

Affected Products

Firefox

References · 12

• 🔥 https://github.com/crixpwn/CVE-2026-8389 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8389 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-8389 · Security Note
• https://ubuntu.com/security/CVE-2026-8389 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-8389 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-45/#CVE-2026-8389 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-45 · Vendor Advisory
• https://t.me/CVEtracker/53517 · Telegram Post
• https://twitter.com/Cezar_H_Linux/status/2055391209850290497 · Twitter Post
• https://twitter.com/xvonfers/status/2054594270653259927 · Twitter Post
• https://t.me/cveNotify/166225 · Telegram Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=2036983 · Note