CVE Database
/

CVE-2026-8949

Back to search

CVE-2026-8949

Published: May 19, 2026

Modified: May 19, 2026

PUBLISHED

Description

Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

VendorProductVersions

Mozilla

Firefox

unaffected
140.11 - <= 140.*
unaffected
151 - <= *

Mozilla

Thunderbird

unaffected
140.11 - <= 140.*
unaffected
151 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now