CVE-2026-0881

CriticalCVSS 10.0

Published: 13/01/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A sandbox escape vulnerability exists in the Messaging System component. This flaw was fixed in Firefox 147 and Thunderbird 147.

Risk Assessment

An attacker can break out of the sandbox and gain unauthorized access to the underlying operating system, potentially leading to full device compromise.

Recommendation

Immediately update Firefox and Thunderbird to version 147 or later.

Original NVD description (English source)

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.