CVE-2026-8091

published 2026-05-07

CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	< 115.35.2	115.35.2
mozilla	firefox	>= 140.0 < 140.10.1	140.10.1
mozilla	firefox_esr	< Firefox ESR 115.35.2	Firefox ESR 115.35.2
mozilla	thunderbird	>= 140.0 < 140.10.1	140.10.1

CWE-754