CVE-2026-8389 — JIT miscompilation in the JavaScript Engine: JIT component

Description (CNA)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox	unaffected 150.0.3 through *

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2036983
https://www.mozilla.org/security/advisories/mfsa2026-45/

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/crixpwn/CVE-2026-8389

redhat-SADP

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component

https://access.redhat.com/security/cve/CVE-2026-8389
https://bugzilla.redhat.com/show_bug.cgi?id=2476466
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8389.json