CVE-2026-8091

EPSS 0.47%
Veröffentlicht 07.05.2026 12:45:05
Zuletzt bearbeitet 11.08.2026 13:19:09
Erkennungen
Login

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 34

NVD 3 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwEdition esr Version < 115.35.2

Mozilla ≫ Firefox SwEdition esr Version >= 140.0 < 140.10.1

Mozilla ≫ Thunderbird SwEdition - Version >= 140.0 < 140.10.1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.47%	0.379

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	7.5	1.6	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

CWE-805 Buffer Access with Incorrect Length Value

The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

https://www.mozilla.org/security/advisories/mfsa2026-30/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-33/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-36/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-39/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-42/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=2029301

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=2467699

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8091.json

https://access.redhat.com/errata/RHSA-2026:19348

https://access.redhat.com/errata/RHSA-2026:19153

https://access.redhat.com/errata/RHSA-2026:19157

https://access.redhat.com/errata/RHSA-2026:19370

https://access.redhat.com/errata/RHSA-2026:19588

https://access.redhat.com/errata/RHSA-2026:20586

https://access.redhat.com/errata/RHSA-2026:21743

https://access.redhat.com/errata/RHSA-2026:22324

https://access.redhat.com/errata/RHSA-2026:22408

https://access.redhat.com/errata/RHSA-2026:22409

https://access.redhat.com/errata/RHSA-2026:22410

https://access.redhat.com/errata/RHSA-2026:22708

https://access.redhat.com/errata/RHSA-2026:22712

https://access.redhat.com/errata/RHSA-2026:22847

https://access.redhat.com/errata/RHSA-2026:24345

https://access.redhat.com/errata/RHSA-2026:24717

https://access.redhat.com/errata/RHSA-2026:24718

https://access.redhat.com/errata/RHSA-2026:24719

https://access.redhat.com/errata/RHSA-2026:24721

https://access.redhat.com/errata/RHSA-2026:24844

https://access.redhat.com/errata/RHSA-2026:24846

https://access.redhat.com/errata/RHSA-2026:25014

https://access.redhat.com/security/cve/CVE-2026-8091

https://nvd.nist.gov/vuln/detail/CVE-2026-8091

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-8091

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-8091

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-8091