CVE-2026-8947

Опубликовано: 19 мая 2026

Источник: debian

Описание

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Пакеты

Пакет	Статус	Версия исправления	Тип
firefox	fixed	151.0-1	package
firefox-esr	fixed	140.11.0esr-1	package
thunderbird	fixed	1:140.11.0esr-1	package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/#CVE-2026-8947
https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/#CVE-2026-8947
https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/#CVE-2026-8947

Связанные уязвимости

CVE-2026-8947

CVSS3: 7.3

ubuntu

2 месяца назад

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVE-2026-8947

CVSS3: 7.5

redhat

2 месяца назад

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVE-2026-8947

CVSS3: 7.3

nvd

2 месяца назад

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

GHSA-6fhv-h367-4jc4

CVSS3: 7.3

github

2 месяца назад

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11.

BDU:2026-08156

CVSS3: 7.3

fstec

2 месяца назад

Уязвимость компонента Bindings (WebIDL) браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код