Description (CNA)
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Firefox | unaffected 115.42 through 115.*; unaffected 140.17 through 140.*; unaffected 153.3 through 153.*; unaffected 156 through * |
| Mozilla / Thunderbird | unaffected 140.17 through 140.*; unaffected 153.3 through 153.*; unaffected 156 through * |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2061245
- https://www.mozilla.org/security/advisories/mfsa2026-102/
- https://www.mozilla.org/security/advisories/mfsa2026-90/
- https://www.mozilla.org/security/advisories/mfsa2026-93/
- https://www.mozilla.org/security/advisories/mfsa2026-94/
- https://www.mozilla.org/security/advisories/mfsa2026-96/
- https://www.mozilla.org/security/advisories/mfsa2026-98/
- https://www.mozilla.org/security/advisories/mfsa2026-99/
ADP enrichment
No English description supplied.
No references supplied.