Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HMozilla Firefox
APPMozilla< 115.34.0< 149.0128.0 – 140.9.0 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
References
Related vulnerabilities
CVE-2024-9680CRITICAL9.8⚠ KEVPL ✓same product
Use-after-free w Animation timelines Firefox/Thunderbird — RCE
CVE-2022-26486CRITICAL9.6⚠ KEVPL ✓same product
Use-after-free w WebGPU IPC framework Mozilla — sandbox escape
CVE-2019-11708CRITICAL10.0⚠ KEVPL ✓same product
Mozilla Firefox/Thunderbird: przełamanie sandbox przez IPC Prompt:Open
CVE-2010-3765CRITICAL9.8⚠ KEVPL ✓same product
RCE w Mozilla Firefox przez błąd nsCSSFrameConstructor::ContentAppended
CVE-2026-84119CRITICAL9.6same product
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox...