CVE-2026-8947: Use-after-free in the DOM: Bindings (WebIDL) component
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 115.36 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.11 - Upgrade
Upgrade
Mozilla Firefoxto a version that resolves this vulnerability.Fixed in 151 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.36 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.11 - Upgrade
Upgrade
Mozilla Thunderbirdto a version that resolves this vulnerability.Fixed in 151 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 140.11
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8946
- CVE-2026-8388
- CVE-2026-8947
- CVE-2026-8391
- CVE-2026-8401
- CVE-2026-8953
- CVE-2026-8975
- CVE-2026-8945
- CVE-2026-8948
- CVE-2026-8949
- CVE-2026-8950
- CVE-2026-8951
- CVE-2026-8952
- CVE-2026-8954
- CVE-2026-8955
- CVE-2026-8956
- CVE-2026-8957
- CVE-2026-8958
- CVE-2026-8959
- CVE-2026-8960
- CVE-2026-8961
- CVE-2026-8962
- CVE-2026-8963
- CVE-2026-8964
- CVE-2026-8965
- CVE-2026-8966
- CVE-2026-8967
- CVE-2026-8968
- CVE-2026-8969
- CVE-2026-8970
- CVE-2026-8971
- CVE-2026-8972
- CVE-2026-8973
- CVE-2026-8974
Frequently Asked Questions
What is the severity of CVE-2026-8947?
CVE-2026-8947 is classified as a critical vulnerability due to its potential to cause significant exploitation risks.
How do I fix CVE-2026-8947?
To fix CVE-2026-8947, update to Firefox version 151, Firefox ESR version 115.36, or Thunderbird version 151.
Which versions are affected by CVE-2026-8947?
CVE-2026-8947 affects versions of Firefox below 151, Firefox ESR below 115.36, and Thunderbird below 151.
What is the nature of the vulnerability CVE-2026-8947?
CVE-2026-8947 is a use-after-free vulnerability in the DOM: Bindings (WebIDL) component.
Has CVE-2026-8947 been fixed in earlier versions of Firefox or Thunderbird?
No, CVE-2026-8947 was addressed in specific updates starting with Firefox 151 and Firefox ESR 115.36.