CVE Catalog
CVE-2026-12296
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
A sandbox escape vulnerability in the Security: Process Sandboxing component. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
An attacker could exploit this vulnerability to break out of the sandbox, potentially leading to privilege escalation and full system compromise.
Recommendation
Immediately update Firefox to version 152 or later, Firefox ESR to 140.12, and Thunderbird to version 152 or 140.12.
Original NVD description (English source)
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.