Mozilla Products Multiple Vulnerabilities

Release Date: 20 May 2026

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, spoofing and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Information Disclosure
• Security Restriction Bypass
• Elevation of Privilege
• Spoofing

---

System / Technologies affected

Versions prior to:

 

• Firefox 151
• Firefox ESR 115.36
• Firefox ESR 140.11
• Firefox for iOS 151.0
• Thunderbird 140.11
• Thunderbird 151

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• Firefox 151
• Firefox ESR 115.36
• Firefox ESR 140.11
• Firefox for iOS 151.0
• Thunderbird 140.11
• Thunderbird 151

---

Vulnerability Identifier

• CVE-2026-8388
• CVE-2026-8391
• CVE-2026-8401
• CVE-2026-8706
• CVE-2026-8945
• CVE-2026-8946
• CVE-2026-8947
• CVE-2026-8948
• CVE-2026-8949
• CVE-2026-8950
• CVE-2026-8951
• CVE-2026-8952
• CVE-2026-8953
• CVE-2026-8954
• CVE-2026-8955
• CVE-2026-8956
• CVE-2026-8957
• CVE-2026-8958
• CVE-2026-8959
• CVE-2026-8960
• CVE-2026-8961
• CVE-2026-8962
• CVE-2026-8963
• CVE-2026-8964
• CVE-2026-8965
• CVE-2026-8966
• CVE-2026-8967
• CVE-2026-8968
• CVE-2026-8969
• CVE-2026-8970
• CVE-2026-8971
• CVE-2026-8972
• CVE-2026-8973
• CVE-2026-8974
• CVE-2026-8975

---

Source

• Mozilla

---

Related Link

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-47/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-49/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-50/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/