← Database

CVE-2026-8959

CRITICAL CVSS: 9.6 Published: 2026-05-19 Modified: 2026-06-17

Description

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-20, CWE-119, CWE-693

References