Search: CVE-2026-100794

CVE-2026-100794 is a critical vulnerability in Mozilla Thunderbird involving a sandbox escape caused by incorrect boundary conditions in the Internationalization component. This flaw allows an attacker to bypass sandbox protections, potentially leading to full compromise of confidentiality, integrity, and availability. The issue has been fixed in Thunderbird versions 140.17, 153.4, and 157, as well as Firefox ESR 140.17, ESR 153.4, and Firefox 157.