CVE-2026-8953

Critical

Published: 19/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A 'sandbox escape' vulnerability exists due to a use-after-free error in the Disability Access APIs component. It has been fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system, posing a serious threat to user data security.

Recommendation

It is recommended to update to the latest versions of Firefox or Thunderbird to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.