CVE-2026-100758

Summary

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox115.42 <= 115.*unaffected
MozillaFirefox140.17 <= 140.*unaffected
MozillaFirefox153.4 <= 153.*unaffected
MozillaFirefox157 <= *unaffected

Weaknesses

References