GHSA-j5qx-hh9g-j6wjCriticalCVSS 10.0

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component....

Published
March 24, 2026
Last Modified
June 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-4689 →

📋 Description

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

🔗 References (36)