CVEFinder.io

CVE-2026-8945

⚠️ high
🔍 Scan for this CVE
Summary

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

CVSS Score
7.5
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-05-19
First Seen: 2026-05-20
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 67.7% of all 360,548 vulnerabilities in our database.

#116,281
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Daisuke Hatakeyama and Shota Matsuda
SSVC data provided by CISA
Last Modified 2026-07-15
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-693 CWE-653

📦 Affected Products 2

Vendor Product Status Affected Versions
mozilla firefox Affected
< 151.0.0
mozilla firefox_focus Affected
< 151.0

🔗 References 5

https://bugzilla.mozilla.org/show_bug.cgi?id=2003171
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026...
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-8945
https://bugzilla.redhat.com/show_bug.cgi?id=2479863
https://security.access.redhat.com/data/csaf/v2/vex/...

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-84118 🔶 medium 5.4 0.2 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderb... 2026-09-01
CVE-2026-84119 ⛔ critical 9.6 0.3 Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Fire... 2026-09-01
CVE-2026-84120 🔶 medium 5.4 0.2 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ES... 2026-09-01
CVE-2026-84121 ⛔ critical 9.6 0.3 Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefo... 2026-09-01
CVE-2026-84122 🔶 medium 5.4 0.2 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ES... 2026-09-01
CVE-2026-84123 ⚠️ high 8.8 0.2 Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 15... 2026-09-01
These CVEs affect the same products