← CVE Intelligence

CVE-2026-4690

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component PUBLISHED

Description (CNA)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Affected (CNA)

Vendor / productVersions
Mozilla / Firefoxunaffected 115.34 through 115.*; unaffected 140.9 through 140.*; unaffected 149 through *
Mozilla / Thunderbirdunaffected 140.9 through 140.*; unaffected 149 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component