Mozilla Products Multiple Vulnerabilities

Release Date: 20 May 2026 13610 Views

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, spoofing and sensitive information disclosure on the targeted system.

Impact

Denial of Service
Remote Code Execution
Information Disclosure
Security Restriction Bypass
Elevation of Privilege
Spoofing

System / Technologies affected

Versions prior to:

Firefox 151
Firefox ESR 115.36
Firefox ESR 140.11
Firefox for iOS 151.0
Thunderbird 140.11
Thunderbird 151

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Firefox 151
Firefox ESR 115.36
Firefox ESR 140.11
Firefox for iOS 151.0
Thunderbird 140.11
Thunderbird 151

Vulnerability Identifier

CVE-2026-8388
CVE-2026-8391
CVE-2026-8401
CVE-2026-8706
CVE-2026-8945
CVE-2026-8946
CVE-2026-8947
CVE-2026-8948
CVE-2026-8949
CVE-2026-8950
CVE-2026-8951
CVE-2026-8952
CVE-2026-8953
CVE-2026-8954
CVE-2026-8955
CVE-2026-8956
CVE-2026-8957
CVE-2026-8958
CVE-2026-8959
CVE-2026-8960
CVE-2026-8961
CVE-2026-8962
CVE-2026-8963
CVE-2026-8964
CVE-2026-8965
CVE-2026-8966
CVE-2026-8967
CVE-2026-8968
CVE-2026-8969
CVE-2026-8970
CVE-2026-8971
CVE-2026-8972
CVE-2026-8973
CVE-2026-8974
CVE-2026-8975

Source

Mozilla