VULNERABILITY INTELLIGENCE

CVE-2026-0879

CVSS score9.8 CRITICAL
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-07-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-119

Primary references