CVE-2026-8389

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

Affected products

Firefox

Mozilla Firefox

< 150.0.3

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.3% (25th percentile)

Weakness

CWE-733, CWE-686, CWE-119, CWE-843

NVD status

Modified

Published

2026-05-12