CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11…

medium6.5CVSS 3.1

AVNACLPRNUINSUCLILAN

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	< Firefox 150.0.3	Firefox 150.0.3
mozilla	firefox	< 150.0.3	150.0.3
mozilla	firefox	—	—
mozilla	firefox_esr	< Firefox ESR 115.36	Firefox ESR 115.36
mozilla	firefox_esr	< Firefox ESR 140.11	Firefox ESR 140.11
mozilla	thunderbird	< Thunderbird 140.11	Thunderbird 140.11
rhel10	firefox-flatpak	—	—