CVE-2026-117988 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CriticalCVSS 9.6
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat/firefox(Red Hat:enterprise_linux:10) | All versions | No fix listed |
| redhat/rhel10/firefox-flatpak(Red Hat:enterprise_linux:10) | All versions | No fix listed |
| redhat/rhel10/thunderbird-flatpak(Red Hat:enterprise_linux:10) | All versions | No fix listed |
| redhat/thunderbird(Red Hat:enterprise_linux:10) | All versions | No fix listed |
| redhat/firefox(Red Hat:rhel_els:6) | All versions | No fix listed |
| redhat/thunderbird(Red Hat:rhel_els:6) | All versions | No fix listed |
| redhat/firefox(Red Hat:rhel_els:7) | All versions | No fix listed |
| redhat/thunderbird(Red Hat:rhel_els:7) | All versions | No fix listed |
| redhat/firefox(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/thunderbird(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/firefox(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| redhat/thunderbird(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| debian/firefox-esr(Debian:12) | < 153.6.0esr-1~deb12u2 | 153.6.0esr-1~deb12u2 |
| debian/firefox-esr(Debian:12) | = 102.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb12u1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.0.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.1.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-4 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb12u1 | No fix listed |
References
- bugzilla.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- Red Hat CVE page vendor-advisory
- Red Hat Bugzilla 2562096 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-117988 vendor-advisory
- Ubuntu CVE tracker vendor-advisory