Threats Tagged 'ghsa-qprj-mxfp-87w7'

CVE-2026-109712 is a high-severity vulnerability in Mozilla Firefox involving a sandbox escape caused by uninitialized memory in the Graphics component. This flaw allows an attacker to potentially bypass sandbox restrictions, impacting confidentiality, integrity, and availability. The vulnerability affects Firefox versions prior to 158, Firefox ESR versions prior to 115.43 and 153.5, as well as Thunderbird versions prior to 158 and 153.5. Official fixes have been released in these versions.