CVE-2026-8388: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Affected products

• Mozilla Firefox: before 150.0.3 (fixed in 150.0.3)

Published 2026-05-12. Last modified 2026-07-15.