Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3376 articles · 142302 vulns · 36/41 feeds (7d)
← Back to list
9.8
CVE-2026-8094PATCHED
mozilla · firefox esr

Other issue in the WebRTC component

Description

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.

Affected Products

VendorProductVersions
mozillafirefox esr—

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
mozillafirefoxcert_advisory90%
mozillafirefox esrcert_advisory90%

References

  • https://bugzilla.mozilla.org/show_bug.cgi?id=2035939
  • https://www.mozilla.org/security/advisories/mfsa2026-41/
  • https://www.mozilla.org/security/advisories/mfsa2026-44/

Related News (3 articles)

Tier B
CERT-FR23h ago
Multiples vulnérabilités dans les produits Mozilla (11 mai 2026)
→ No new info (linked only)
Tier B
BSI Advisories3d ago
[NEU] [mittel] Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB4d ago
CVE-2026-8094 | Mozilla Firefox up to 140.10.1 WebRTC Remote Code Execution
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
140.10.2
PublishedMay 7, 2026
Last enriched4d agov2
Trending Score55
Source articles3
Independent3
Info Completeness7/14
Missing: cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-8091EXP
Incorrect boundary conditions in the Audio/Video: Playback component
Trending: 71
HIGHCVE-2026-8090EXP
Use-after-free in the DOM: Networking component
Trending: 64
HIGHCVE-2026-8092EXP
Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2
Trending: 59
HIGHCVE-2026-8093EXP
Memory safety bugs fixed in Thunderbird 150.0.2
Trending: 59
CRITICALCVE-2026-7321
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component
Trending: 43

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
May 7, 2026
Discovered by ZDM
May 7, 2026
Updated: description, affectedVersions, severity
May 7, 2026
Patch Available
May 8, 2026

Version History

v2
Last enriched 4d ago
v2Tier C4d ago

Updated description with critical vulnerability details, added affected version 140.10.1, and changed severity to CRITICAL.

descriptionaffectedVersionsseverity
via VulDB
v14d ago

Initial creation