CVE-2026-8953

Summary

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=2029511
• https://www.mozilla.org/security/advisories/mfsa2026-46/
• https://www.mozilla.org/security/advisories/mfsa2026-47/
• https://www.mozilla.org/security/advisories/mfsa2026-48/
• https://www.mozilla.org/security/advisories/mfsa2026-50/
• https://www.mozilla.org/security/advisories/mfsa2026-51/

• ←Previous
• Next→