CVE-2026-8961

Spoofing issue in the Form Autofill component

Medium · published May 19, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.1th percentile
Published
2026-05-19T12:29Z
EPSS history
Timeline
  • 19 MAY 12:29Z
    Spoofing issue in the Form Autofill component
    cvelistv5