CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150.0.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 115.36 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.11 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 150.0.3 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.36 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.11 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 140.11
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-8388?
CVE-2026-8388 has been classified as a moderate severity vulnerability due to incorrect boundary conditions in the JavaScript Engine's JIT component.
How do I fix CVE-2026-8388?
To fix CVE-2026-8388, update your Mozilla Firefox to version 150.0.3 or later.
What are the potential impacts of CVE-2026-8388?
CVE-2026-8388 could potentially allow for arbitrary code execution under certain conditions due to the boundary issues in the JavaScript Engine.
Is CVE-2026-8388 present in earlier versions of Firefox?
Yes, CVE-2026-8388 affects versions of Mozilla Firefox prior to 150.0.3.
Has CVE-2026-8388 been addressed in Mozilla Firefox?
Yes, CVE-2026-8388 was fixed in the release of Mozilla Firefox version 150.0.3.