Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-8401
PUBLISHED
More InfoOfficial Page
Assigner-mozilla
Assigner Org ID-f16b083a-5664-49f3-a51e-8d479e5ed7fe
View Known Exploited Vulnerability (KEV) details
Published At-12 May, 2026 | 14:24
Updated At-30 Jun, 2026 | 03:18
Rejected At-
â–¼CVE Numbering Authority (CNA)
Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Affected Products
Vendor
Mozilla CorporationMozilla
Product
Firefox
Versions
Unaffected
  • From 115.36 through 115.* (rpm)
  • From 140.11 through 140.* (rpm)
  • From 150.0.3 through * (rpm)
Vendor
Mozilla CorporationMozilla
Product
Thunderbird
Versions
Unaffected
  • From 140.11 through * (rpm)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
ggwhyp
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://bugzilla.mozilla.org/show_bug.cgi?id=2038679
N/A
https://www.mozilla.org/security/advisories/mfsa2026-45/
N/A
https://www.mozilla.org/security/advisories/mfsa2026-47/
N/A
https://www.mozilla.org/security/advisories/mfsa2026-48/
N/A
https://www.mozilla.org/security/advisories/mfsa2026-51/
N/A
Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=2038679
Resource: N/A
Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-45/
Resource: N/A
Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-47/
Resource: N/A
Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-48/
Resource: N/A
Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-51/
Resource: N/A
â–¼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-693CWE-693 Protection Mechanism Failure
Type: CWE
CWE ID: CWE-693
Description: CWE-693 Protection Mechanism Failure
Metrics
VersionBase scoreBase severityVector
3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. firefox: thunderbird: Sandbox escape in the Profile Backup component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component

Affected Products
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux Server (v. 7 ELS)
CPEs
  • cpe:/o:redhat:rhel_els:7
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream EUS (v. 10.0)
CPEs
  • cpe:/o:redhat:enterprise_linux_eus:10.0
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream (v. 10)
CPEs
  • cpe:/o:redhat:enterprise_linux:10.2
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream (v. 8)
CPEs
  • cpe:/a:redhat:enterprise_linux:8::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream AUS (v.8.4)
CPEs
  • cpe:/a:redhat:rhel_aus:8.4::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
CPEs
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream AUS (v.8.6)
CPEs
  • cpe:/a:redhat:rhel_aus:8.6::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
CPEs
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream E4S (v.8.8)
CPEs
  • cpe:/a:redhat:rhel_e4s:8.8::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream TUS (v.8.8)
CPEs
  • cpe:/a:redhat:rhel_tus:8.8::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream E4S (v.9.2)
CPEs
  • cpe:/a:redhat:rhel_e4s:9.2::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream E4S (v.9.4)
CPEs
  • cpe:/a:redhat:rhel_e4s:9.4::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream EUS (v.9.6)
CPEs
  • cpe:/a:redhat:rhel_eus:9.6::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux AppStream (v. 9)
CPEs
  • cpe:/a:redhat:enterprise_linux:9::appstream
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 10
CPEs
  • cpe:/o:redhat:enterprise_linux:10
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 6
CPEs
  • cpe:/o:redhat:enterprise_linux:6
Default Status
affected
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 7
CPEs
  • cpe:/o:redhat:enterprise_linux:7
Default Status
affected
Problem Types
TypeCWE IDDescription
CWECWE-653Improper Isolation or Compartmentalization
Type: CWE
CWE ID: CWE-653
Description: Improper Isolation or Compartmentalization
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Red Hat severity rating
value:
Important
namespace:
https://access.redhat.com/security/updates/classification/
Impacts
CAPEC IDDescription
Solutions

RHSA-2026:26551: Red Hat Enterprise Linux Server (v. 7 ELS)

RHSA-2026:27715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

RHSA-2026:26539: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

RHSA-2026:21380: Red Hat Enterprise Linux AppStream (v. 10)

RHSA-2026:22325: Red Hat Enterprise Linux AppStream (v. 10)

RHSA-2026:21382: Red Hat Enterprise Linux AppStream (v. 8)

RHSA-2026:22643: Red Hat Enterprise Linux AppStream (v. 8)

RHSA-2026:26629: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)

RHSA-2026:26270: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)

RHSA-2026:26606: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)

RHSA-2026:26536: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)

RHSA-2026:26630: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)

RHSA-2026:26268: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)

RHSA-2026:26491: Red Hat Enterprise Linux AppStream E4S (v.9.2)

RHSA-2026:26269: Red Hat Enterprise Linux AppStream E4S (v.9.2)

RHSA-2026:26493: Red Hat Enterprise Linux AppStream E4S (v.9.4)

RHSA-2026:26174: Red Hat Enterprise Linux AppStream E4S (v.9.4)

RHSA-2026:26492: Red Hat Enterprise Linux AppStream EUS (v.9.6)

RHSA-2026:26521: Red Hat Enterprise Linux AppStream EUS (v.9.6)

RHSA-2026:21378: Red Hat Enterprise Linux AppStream (v. 9)

RHSA-2026:21381: Red Hat Enterprise Linux AppStream (v. 9)

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Reported to Red Hat.2026-05-12 15:01:19
Made public.2026-05-12 14:24:33
Event: Reported to Red Hat.
Date: 2026-05-12 15:01:19
Event: Made public.
Date: 2026-05-12 14:24:33
Replaced By
Rejected Reason
References
HyperlinkResource
https://access.redhat.com/security/cve/CVE-2026-8401
vdb-entry
x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2476492
issue-tracking
x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8401.json
x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:26551
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27715
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26539
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21380
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22325
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21382
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22643
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26629
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26270
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26606
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26536
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26630
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26268
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26491
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26269
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26493
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26174
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26492
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26521
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21378
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21381
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/security/cve/CVE-2026-8401
Resource:
vdb-entry
x_refsource_REDHAT
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2476492
Resource:
issue-tracking
x_refsource_REDHAT
Hyperlink: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8401.json
Resource:
x_sadp-csaf-vex
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26551
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:27715
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26539
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:21380
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:22325
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:21382
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:22643
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26629
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26270
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26606
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26536
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26630
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26268
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26491
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26269
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26493
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26174
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26492
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:26521
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:21378
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:21381
Resource:
vendor-advisory
x_refsource_REDHAT
Details not found