← Database

CVE-2026-8950

CRITICAL CVSS: 9.3 Published: 2026-05-19 Modified: 2026-06-17

Description

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-346

References