VIR Vulnerability Intelligence Relay

CVE-2026-8951

medium
Published 2026-05-19 · Modified 2026-05-20
CVSS v3
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v2
—
VIR risk
6.5

Description

Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.

Predictions

Exploit likelihood
75%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2026-8951.html

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2026-8951

vendor Authored 2026-05-27

Vendor advisory: security@mozilla.org — https://www.mozilla.org/security/advisories/mfsa2026-46/

OS impact
OSVersionStatusFixed in
debian debiansidfixed0
suse slesaffected

Application impact
VendorProductVersionsFixed
mozillafirefox{"endExcluding":"151.0.0"}151.0.0

References

CWEs

CWE-290

Verify integrity in audit chain (admin only). AS-IS.