CVEFinder.io

CVE-2026-8947

⚠️ high
🔍 Scan for this CVE
Summary

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVSS Score
7.3
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-05-19
First Seen: 2026-05-20
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 55.4% of all 336,041 vulnerabilities in our database.

#149,921
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Satoki Tsuji
SSVC data provided by CISA
Last Modified 2026-07-15
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE IDs (Weakness Types)

📦 Affected Products 4

🔗 References 30

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-15718 🔶 medium 4.3 0.2 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.... 2026-07-14
CVE-2026-15719 🔶 medium 5.4 0.1 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.... 2026-07-14
CVE-2026-13356 🔶 medium 6.3 0.1 A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the brows... 2026-07-07
CVE-2026-57962 🔶 medium 5.3 0.2 A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitr... 2026-07-01
CVE-2026-57963 🔶 medium 6.5 0.2 An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, an... 2026-07-01
CVE-2026-14241 ⛔ critical 9.8 0.2 Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume th... 2026-06-30
These CVEs affect the same products