CVE-2026-124903 Sandbox escape due to use-after-free in the IPC component
CriticalCVSS 9.6
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | All versions | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 102.15.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.0.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.1.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.10.0esr-1~deb12u1 | No fix listed |
Show 175 more
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.2.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb10u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 115.9.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.5.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb11u3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-3 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.6.0esr-4 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 128.9.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.10.2esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.11.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.12.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.13.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.14.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.15.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.16.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb11u2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.0esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.3.1esr-2 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.4.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.5.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.6.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.7.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb12u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.8.0esr-1~deb13u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1~deb11u1 | No fix listed |
| debian/firefox-esr(Debian:12) | = 140.9.0esr-1~deb12u1 | No fix listed |
References
- bugzilla.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- www.mozilla.org
- security-tracker.debian.org vendor-advisory
- Red Hat CVE page vendor-advisory
- Red Hat Bugzilla 2570365 issue-tracking
- www.cve.org
- nvd.nist.gov
- RHSA-2026:99112 patch vendor-advisory
- RHSA-2026:99111 patch vendor-advisory
- RHSA-2026:99110 patch vendor-advisory