[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLSfuV4cYM49MgKzF40qhIMz1d9dD_mUvAw-a2MPImSw":3,"g5a-risk:CVE-2026-8945":134},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":34,"epssPercentile":25,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":67,"weaknesses":68,"weaknessesCount":46,"isActivelyExploited":83,"cisaInfo":25,"otxData":25,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":122,"notableEvents":123},"CVE-2026-8945","What is CVE-2026-8945?","Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.","2026-05-19T14:16:50.687","2026-07-15T01:17:06.27",7.5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":31,"CVSSMetricV2":32,"CVSSMetricV40":33},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":21,"IntegrityImpact":21,"AvailabilityImpact":21,"BaseScore":11,"BaseSeverity":21,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","REQUIRED","UNCHANGED",null,1.6,5.9,{"Source":29,"Type":17,"CVSSData":30,"ExploitabilityScore":26,"ImpactScore":27},"0b0ca135-0b70-47e7-9f44-1890c2a1c46c",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":21,"IntegrityImpact":21,"AvailabilityImpact":21,"BaseScore":11,"BaseSeverity":21,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],[],0.00398,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"mozilla","firefox","*","cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",{"vendor":39,"product":44,"version":41,"criteria":45,"vulnerable":4},"firefox_focus","cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:android:*:*",2,[48,53,57,61,64],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=2003171","Mozilla",[52],"Permissions Required",{"url":54,"source":50,"tags":55},"https:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fadvisories\u002Fmfsa2026-46\u002F",[56],"Vendor Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8945","Red Hat",[],{"url":62,"source":59,"tags":63},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2479863",[],{"url":65,"source":59,"tags":66},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-8945.json",[],5,[69,77],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-653","Improper Isolation or Compartmentalization","The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.","When a weakness occurs in functionality that is accessible by lower-privileged users, then without strong boundaries, an attack might extend the scope of the damage to higher-privileged users.","Draft","Class","Simple",{"id":78,"name":79,"description":80,"extendedDescription":81,"status":74,"abstraction":82,"structure":76},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Pillar",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2026-8945? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-8945, a high severity cyber security vulnerability from 2026. Sandbox escape in Firefox and Firefox Focus for Android. Thi...","CVE-2026-8945, CVE-2026-8945 vulnerability, CVE-2026-8945 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, mozilla security, firefox vulnerability, firefox_focus vulnerability","\u002Fwhat-is\u002Fcve-2026-8945",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":9,"dateModified":10,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-8945","Cybersecurity","CVE-2026-8945, CVE-2026-8945 vulnerability, CVE-2026-8945 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":25,"Negate":25,"Nodes":112},[113],{"Operator":114,"Negate":83,"CPEMatch":115},"OR",[116,119],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":117,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":118,"VersionEndIncluding":25},"7C197B6D-C48E-4D7E-A1C0-52E081E97DF0","151.0.0",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":120,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":121,"VersionEndIncluding":25},"3965AA1E-FC2D-47D5-9D3D-3B1E3ECD4399","151.0",[],[124],{"id":125,"eventType":126,"eventTime":127,"details":128,"label":129,"color":130},"1d2cc7ed-7b20-4b82-86a2-121ede7e022a","NEW_NVD","2026-05-22T08:55:12.623873+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":10,"cacheTime":132,"version":133},1792348006710,"2.0",{"score":135,"band":136,"action":137,"scoredAt":138},46,"Medium","Plan remediation","2026-10-16T07:13:36.168168+00:00"]