CVE-2026-4689

Publication date

2026-03-24 12:30:23

Family

mozilla

State

PUBLISHED

Description

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.