CVE-2026-0878

Publication date

2026-01-13 13:30:53

Family

mozilla

State

PUBLISHED

Description

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability affects Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.