{"metadata": {"vulnerability": "CVE-2026-8389", "count": 45, "kinds": {"milestone": 8, "sighting": 7, "kev": 0, "other": 30}}, "data": [{"timestamp": "2026-05-12T00:00:00Z", "date_only": true, "value": "2026-05-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0578", "record": "CERTFR-2026-AVI-0578", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-12T12:36:11.734Z", "date_only": false, "value": "2026-05-12T12:36:11.734Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8389", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-12T12:36:12.516Z", "date_only": false, "value": "2026-05-12T12:36:12.516Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-8389", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-05-12T12:36:12.516Z", "date_only": false, "value": "2026-05-12T12:36:12.516Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8389", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-12T12:36:12.516Z", "date_only": false, "value": "2026-05-12T12:36:12.516Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-8389", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-05-12T12:36:12.516Z", "date_only": false, "value": "2026-05-12T12:36:12.516Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mozilla", "record": "CVE-2026-8389", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-12T14:01:13.009Z", "date_only": false, "value": "2026-05-12T14:01:13.009Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-8389", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-05-12T14:17:00Z", "date_only": false, "value": "2026-05-12T14:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-8389", "record": "UBUNTU-CVE-2026-8389", "field": "published"}, {"timestamp": "2026-05-12T14:17:11Z", "date_only": false, "value": "2026-05-12T14:17:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QH6R-H4HF-PR8W", "record": "GHSA-QH6R-H4HF-PR8W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-12T14:17:11.930Z", "date_only": false, "value": "2026-05-12T14:17:11.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8389", "record": "FKIE_CVE-2026-8389", "field": "published"}, {"timestamp": "2026-05-12T15:15:42.493Z", "date_only": false, "value": "2026-05-12T15:15:42.493175Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo3f3lnww2c", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "4e774716-1a1f-4856-bf03-6da7d87afa87", "content": "CVE-2026-8389 - JIT miscompilation in the JavaScript Engine: JIT component\nCVE ID : CVE-2026-8389\n \n Published : May 12, 2026, 2:17 p.m. | 13\u00a0minutes ago\n \n Description : JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0....", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo3f3lnww2c"}, {"timestamp": "2026-05-12T15:31:40Z", "date_only": false, "value": "2026-05-12T15:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QH6R-H4HF-PR8W", "record": "GHSA-QH6R-H4HF-PR8W", "field": "published"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0578", "record": "CERTFR-2026-AVI-0578", "field": "last_revision_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0578", "record": "CERTFR-2026-AVI-0578", "field": "initial_release_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0578", "record": "CERTFR-2026-AVI-0578", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-13T06:28:15Z", "date_only": false, "value": "2026-05-13T06:28:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-mozilla-firefox", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "571274e8-8778-4771-9f8e-f158d573bf82", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-mozilla-firefox"}, {"timestamp": "2026-05-13T06:44:38.819Z", "date_only": false, "value": "2026-05-13T06:44:38.819942Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/eed1dbdf-5a0f-4cc2-9665-fa1ff05b0c1f", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "cd4fd73e-897f-4b86-9ad6-b8afb64f626d", "url": "https://vulnerability.circl.lu/bundle/eed1dbdf-5a0f-4cc2-9665-fa1ff05b0c1f"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": true, "value": "2026-05-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-23637", "record": "CNVD-2026-23637", "field": "submitTime"}, {"timestamp": "2026-05-20T22:00:00Z", "date_only": false, "value": "2026-05-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-05-25T22:00:00Z", "date_only": false, "value": "2026-05-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-05-25T22:49:09.720Z", "date_only": false, "value": "2026-05-25T22:49:09.720312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmpkrtavx224", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "87272e15-1d57-4f5b-ab8e-3e50162180d6", "content": "Mozilla\u3001\u300cFirefox 150.0.3\u300d\u3092\u516c\u958b - \u8106\u5f31\u60275\u4ef6\u3092\u4fee\u6b63\n\u300cFirefox\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001Mozilla Foundation\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\nJavaScript\u30a8\u30f3\u30b8\u30f3\u306e\u300cJIT\u300d\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u306f\u3001\u5883\u754c\u6761\u4ef6\u306e\u51e6\u7406\u304c\u9069\u5207\u3067\u306a\u3044\u8106\u5f31\u6027\u300cCVE-2026-8388\u300d\u3084\u3001\u8aa4\u30b3\u30f3\u30d1\u30a4\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2026-8389\u300d\u304c\u5224\u660e\u3057\u305f\u3002\u3042\u308f\u305b\u3066JavaScript\u30a8\u30f3\u30b8\u30f3\u306b\u304a\u3051\u308b\u554f\u984c\u3068\u3057\u3066\u300cCVE-2026-8391\u300d\u304c\u5224\u660e\u3057\u3066\u3044\u308b\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmpkrtavx224"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-05-28T22:00:00Z", "date_only": false, "value": "2026-05-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-05-31T22:00:00Z", "date_only": false, "value": "2026-05-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-06-02T22:00:00Z", "date_only": false, "value": "2026-06-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-06-05T12:59:48.629Z", "date_only": false, "value": "2026-06-05T12:59:48.629381Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/116697621276964050", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "70d93e11-ae4e-48a4-a105-83ad4eaf687e", "content": "Somebody released a PoC for Firefox CVE-2026-8389, and it works.\nThe PoC doesn't include a sandbox escape, and claims that poc-win-sbx.html includes the escape.  This file was not shared in the repo.\nThe python server on localhost seems unnecessary, as the exploit web server can surely serve up primer.js the first time that payload.js is requested, and the actual payload.js the second time.  \ud83e\udd14", "url": "https://infosec.exchange/users/wdormann/statuses/116697621276964050"}, {"timestamp": "2026-06-05T12:59:52.491Z", "date_only": false, "value": "2026-06-05T12:59:52.491258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnk6yb6nabv2", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "3323fea7-dd0e-4ef3-be33-e748c91d82cc", "content": "Somebody released a PoC for Firefox CVE-2026-8389, and it works.\n\nThe PoC doesn't include a sandbox escape, and claims that `poc-win-sbx.html` includes the escape. This file was not shared in the repo.\n\nThe python server on localhost seems unnecessary, as [\u2026] \n\n[Original post on infosec.exchange]", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnk6yb6nabv2"}, {"timestamp": "2026-06-05T15:51:22.259Z", "date_only": false, "value": "2026-06-05T15:51:22.259078Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8389", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-06-05T15:51:22.259Z", "date_only": false, "value": "2026-06-05T15:51:22.259078Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8389", "record": "FKIE_CVE-2026-8389", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-05T15:51:25.655Z", "date_only": false, "value": "2026-06-05T15:51:25.655Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8389", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": true, "value": "2026-06-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-23637", "record": "CNVD-2026-23637", "field": "openTime"}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T11:14:54.528Z", "date_only": false, "value": "2026-06-17T11:14:54.528+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1503", "record": "WID-SEC-W-2026-1503", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-30T03:36:39Z", "date_only": false, "value": "2026-06-30T03:36:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QH6R-H4HF-PR8W", "record": "GHSA-QH6R-H4HF-PR8W", "field": "modified"}, {"timestamp": "2026-06-30T16:18:40Z", "date_only": false, "value": "2026-06-30T16:18:40Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-8389", "record": "UBUNTU-CVE-2026-8389", "field": "modified"}, {"timestamp": "2026-07-15T01:17:03.507Z", "date_only": false, "value": "2026-07-15T01:17:03.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8389", "record": "FKIE_CVE-2026-8389", "field": "lastModified"}, {"timestamp": "2026-07-15T02:48:11.989Z", "date_only": false, "value": "2026-07-15T02:48:11.989Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8389", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T02:48:11.989Z", "date_only": false, "value": "2026-07-15T02:48:11.989Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-8389", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-05T16:00:04.717Z", "date_only": false, "value": "2026-08-05T16:00:04.717017Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3362", "record": "CVE-2026-8389", "field": "creation_timestamp", "uuid": "d82b878d-0ea0-4a2c-b8fc-9047f68fa081", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c JIT-\u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Mozilla Firefox \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-10970\nCVE-2026-8389\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2026-45/", "url": "https://t.me/bdufstecru/3362"}]}