CVE-2026-0878

CVE-2026-0878 describes a sandbox escape caused by incorrect boundary conditions in the Graphics: CanvasWebGL component. Affected: Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, Thunderbird