CVEFinder.io

CVE-2026-8963

⚠️ high
🔍 Scan for this CVE
Summary

Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVSS Score
7.5
High
EPSS Score
0.0
Exploit Probability
Published Date
2026-05-19
First Seen: 2026-05-20
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.9% of all 336,041 vulnerabilities in our database.

#104,670
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Qadhafy Muhammad Tera
SSVC data provided by CISA
Last Modified 2026-05-20
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE IDs (Weakness Types)
CWE-290

📦 Affected Products 2

Vendor Product Status Affected Versions
mozilla firefox Affected
< 151.0.0
mozilla thunderbird Affected
< 151.0.0

🔗 References 3

https://bugzilla.mozilla.org/show_bug.cgi?id=2021222
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026...
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-15718 🔶 medium 4.3 0.2 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.... 2026-07-14
CVE-2026-15719 🔶 medium 5.4 0.1 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.... 2026-07-14
CVE-2026-13356 🔶 medium 6.3 0.1 A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the brows... 2026-07-07
CVE-2026-57962 🔶 medium 5.3 0.2 A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitr... 2026-07-01
CVE-2026-57963 🔶 medium 6.5 0.2 An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, an... 2026-07-01
CVE-2026-14241 ⛔ critical 9.8 0.2 Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume th... 2026-06-30
These CVEs affect the same products