CVE-2026-117861 Sandbox escape in the DOM: Navigation component
CriticalCVSS 9.6
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 153.6.0esr-1~deb12u2 | 153.6.0esr-1~deb12u2 |
| debian/firefox-esr(Debian:12) | = 102.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.0.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.1.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb12u1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-4 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1~deb12u1 | No fix listed |
References
- bugzilla.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- Debian Security Tracker CVE-2026-117861 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org