CVE Catalog
CVE-2026-12296
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.39%
31th percentile — higher than 31% of all known CVEs
Summary
A sandbox escape vulnerability in the Security: Process Sandboxing component. This flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
An attacker can break out of the sandboxed environment, gaining unauthorized access to the operating system and potentially taking control of the application or the entire system.
Recommendation
Immediately update Firefox to version 152 or later, Firefox ESR to 140.12, and Thunderbird to version 152 or 140.12 depending on the branch used.
Original NVD description (English source)
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.