GHSA-f8x3-g25f-rfqcCriticalCVSS 9.6
Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156,...
🔗 CVE IDs covered (1)
📋 Description
Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
🔗 References (10)
- https://nvd.nist.gov/vuln/detail/CVE-2026-92018
- https://bugzilla.mozilla.org/show_bug.cgi?id=2064287
- https://www.mozilla.org/security/advisories/mfsa2026-90
- https://www.mozilla.org/security/advisories/mfsa2026-91
- https://www.mozilla.org/security/advisories/mfsa2026-92
- https://www.mozilla.org/security/advisories/mfsa2026-93
- https://www.mozilla.org/security/advisories/mfsa2026-94
- https://www.mozilla.org/security/advisories/mfsa2026-95
- https://www.mozilla.org/security/advisories/mfsa2026-96
- https://github.com/advisories/GHSA-f8x3-g25f-rfqc