JavaScript Engine JIT Miscompilation in Firefox by Mozilla
CVE-2026-8389

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 12 May 2026

What is CVE-2026-8389?

A vulnerability has been identified within Mozilla Firefox's JavaScript Engine, specifically in the Just-In-Time (JIT) compilation component. This flaw allows for potential unexpected behavior in the execution of scripts, which could lead to various exploit scenarios. Mozilla released a patch in version 150.0.3 to address this vulnerability, enhancing the security posture of the browser.

Affected Version(s)

Firefox 150.0.3

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2036983

https://www.mozilla.org/security/advisories/mfsa2026-45/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 12, 2026
Vulnerability Reserved
May 12, 2026

Credit

ggwhyp

CVE-2026-8389 Data

JSON