CVE-2026-92066 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-78529

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

CVE-2026-92066 is a sandbox escape in the Profile Backup component of Firefox and Thunderbird , both fixed in version 156 . The Mozilla Foundation issued this via advisories mfsa2026-90 and mfsa2026-94 , with the root cause tracked in Bugzilla bug 2058093 . CISA's SSVC assessment rates the exploi...

CVE-2026-92065 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92065 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78528

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92065

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92065

CVE-2026-92065 is a sandbox escape in Mozilla Firefox and Thunderbird caused by incorrect boundary conditions in the Widget: Win32 component, which handles windowing on Windows. A successful exploit could allow a web page to escape the browser sandbox, potentially leading to code execution with t...

CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78527

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92064

CVE-2026-92064 is a sandbox escape in Mozilla's Widget: Win32 component, caused by incorrect boundary conditions . A successful exploit would allow a sandboxed process to break out of its sandbox, potentially leading to privilege escalation or code execution. The vulnerability is fixed in Firefox...

CVE-2026-92063 Denial-of-service in the Audio/Video component

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-78526

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92063

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92063

CVE-2026-92063 is a denial-of-service vulnerability in the Audio/Video component of Firefox and Thunderbird . It was fixed in Firefox 156 and Thunderbird 156 , as referenced in Mozilla security advisories mfsa2026-90 and mfsa2026-94. The CISA SSVC assessment rates exploitation as none , automatab...

CVE-2026-92062 Privilege escalation in the Session Restore component

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...