CRITICALCVSS 9.8Vulnerability
CVE-2026-8091
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
Properties
- severity
- CRITICAL
- cvss_severity
- CRITICAL
- cvss_score
- 9.8
- epss_score
- 0.00596
- retrieved_at
- 2026-09-25T06:03:36+00:00
- last_source
- FIRST EPSS
- score
- 9.8
- cve_id
- CVE-2026-8091
- cvss_vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- signal_observed_at
- 2026-09-11T17:55:57+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- published_at
- 2026-05-07T13:16:14.087
- last_modified
- 2026-08-11T13:19:09.683
- epss_percentile
- 0.46126
Related Entities (6)
ENRICHED_BY (1)
→[Source]FIRST EPSS
HAS_WEAKNESS (2)
→[Weakness]Buffer Access with Incorrect Length Value
→[Weakness]Improper Check for Unusual or Exceptional Conditions
DESCRIBED_BY (1)
→[Source]NVD
AFFECTS_PRODUCT (2)
→[Product]
→[Product]
Explore deeper with Ninja Signal's threat intelligence graph