Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115…
Critical CVSS 9.6
Summary
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=2071067 Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2026-100/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-101/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-102/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-103/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-97/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-98/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-99/ Vendor Advisory
Timeline
- nvd_ingest NVD