Security Advisory

CVE-2026-2778

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-24 13:33:13
Last updated 2026-02-28 03:18:10
Assigner mozilla
State PUBLISHED

Description

Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.