← Database

CVE-2026-8956

CRITICAL CVSS: 9.8 Published: 2026-05-19 Modified: 2026-06-17

Description

Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-190

References