CVE-2026-8093: Memory safety bugs fixed in Thunderbird 150.0.2
Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Other sources
Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150.0.2 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 150.0.2 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 150.0.2
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-8093?
CVE-2026-8093 is considered to have a high severity due to the potential for memory corruption and arbitrary code execution.
How do I fix CVE-2026-8093?
To fix CVE-2026-8093, update to Mozilla Firefox or Thunderbird version 150.0.2 or later.
What software is affected by CVE-2026-8093?
CVE-2026-8093 affects Mozilla Firefox version 150.0.1 and earlier, as well as Mozilla Thunderbird version 150.0.1 and earlier.
What are memory safety bugs in CVE-2026-8093?
Memory safety bugs in CVE-2026-8093 could lead to memory corruption, possibly allowing attackers to execute arbitrary code.
Is there any evidence of exploitation for CVE-2026-8093?
While some memory safety bugs in CVE-2026-8093 showed evidence of memory corruption, there have been no confirmed reports of exploitation.