CRITICALCVSS 9.1

CVE-2026-92050

Published September 15, 2026 · Source: nvd

Description

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

References

← Browse all CVEs