CVE-2026-8964: Spoofing issue in the Popup Blocker component
Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151 - Upgrade
Upgrade
Mozilla Firefox (Popup Blocker)to a version that resolves this vulnerability.Fixed in 151 - Upgrade
Upgrade
Mozilla Thunderbird (Popup Blocker)to a version that resolves this vulnerability.Fixed in 151
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8945
- CVE-2026-8946
- CVE-2026-8947
- CVE-2026-8948
- CVE-2026-8949
- CVE-2026-8950
- CVE-2026-8951
- CVE-2026-8952
- CVE-2026-8953
- CVE-2026-8954
- CVE-2026-8955
- CVE-2026-8956
- CVE-2026-8957
- CVE-2026-8958
- CVE-2026-8959
- CVE-2026-8960
- CVE-2026-8961
- CVE-2026-8962
- CVE-2026-8963
- CVE-2026-8964
- CVE-2026-8965
- CVE-2026-8966
- CVE-2026-8967
- CVE-2026-8968
- CVE-2026-8969
- CVE-2026-8970
- CVE-2026-8971
- CVE-2026-8972
- CVE-2026-8973
- CVE-2026-8974
- CVE-2026-8975
Frequently Asked Questions
What is the severity of CVE-2026-8964?
CVE-2026-8964 has a high severity rating of 7.5 on the CVSS scale.
How do I fix CVE-2026-8964?
To fix CVE-2026-8964, update your Mozilla Firefox or Thunderbird to version 151 or later.
What type of vulnerability is CVE-2026-8964?
CVE-2026-8964 is a spoofing vulnerability affecting the Popup Blocker component.
What software is impacted by CVE-2026-8964?
CVE-2026-8964 affects Mozilla Firefox and Mozilla Thunderbird.
When was CVE-2026-8964 published?
CVE-2026-8964 was published on May 19, 2026.