CVE-2026-8966

LLM-synthesized narrative grounded in this CVE's description and references.

• Mozilla Corporation/Firefoxinferred3 versions

  <151+ 2 more

  • (no CPE)range: <151
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*range: <151.0.0
  • (no CPE)range: <151
• Mozilla Corporation/Thunderbird2 versions

  cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*+ 1 more

  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*range: <151.0.0
  • (no CPE)range: <151
• osv-coords3 versions

  pkg:apk/chainguard/firefoxpkg:apk/wolfi/firefoxpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed

  < 151-r0+ 2 more

  • (no CPE)range: < 151-r0
  • (no CPE)range: < 151-r0
  • (no CPE)range: < 151.0.1-1.1

• www.mozilla.org/security/advisories/mfsa2026-46/nvdVendor Advisory
• www.mozilla.org/security/advisories/mfsa2026-50/nvdVendor Advisory
• bugzilla.mozilla.org/show_bug.cginvdPermissions Required

• Mozilla Firefox: 25 CVEs Patched in May 2026 Update, Including Four Critical Sandbox Escapes
  Vypr Intelligence · May 19, 2026