CVE-2026-8391: Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	< Firefox 150.0.3	Firefox 150.0.3
mozilla	firefox	< 150.0.3	150.0.3
mozilla	firefox	—	—
mozilla	firefox_esr	< Firefox ESR 115.36	Firefox ESR 115.36
mozilla	firefox_esr	< Firefox ESR 140.11	Firefox ESR 140.11
mozilla	thunderbird	< Thunderbird 140.11	Thunderbird 140.11
rhel10	firefox-flatpak	—	—