CVE-2026-8945CWE-653CWE-693

CVE-2026-8945

High · published May 19, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Weaknesses
CWE-653 · Improper Isolation or Compartmentalization; CWE-693 · Protection Mechanism Failure
Published
2026-05-19T18:16Z
Affected products (2)
ProductVersionsFixed in
mozilla/firefox< 151.0.0151.0.0
mozilla/firefox_focus< 151.0151.0
References (5)
https://bugzilla.mozilla.org/show_bug.cgi?id=2003171 · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-46/ · [email protected]https://access.redhat.com/security/cve/CVE-2026-8945 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://bugzilla.redhat.com/show_bug.cgi?id=2479863 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8945.json · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
EPSS history
Timeline
  • 19 MAY 12:29Z
    Sandbox escape in Firefox and Firefox Focus for Android
    cvelistv5