CVE-2026-4687

Publication date

2026-03-24 12:30:22

Family

mozilla

State

PUBLISHED

Description

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.