PT-2026-40046

CVE-2026-8401

·

Published

2026-05-12

·

Updated

2026-06-29

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 150.0.3 Firefox ESR versions prior to 115.36 Firefox ESR versions prior to 140.11
Description A sandbox escape exists in the Profile Backup component. A sandbox is a security mechanism for separating running programs, ensuring that code in a sandbox cannot access resources outside of it.
Recommendations Update to version 150.0.3. Update to ESR version 115.36. Update to ESR version 140.11.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:21378
ALSA-2026:21380
ALSA-2026:21381
ALSA-2026:21382
ALSA-2026:22325
ALSA-2026:22643
OESA-2026-2392
OESA-2026-2393
OESA-2026-2394
OESA-2026-2465
OESA-2026-2756
OPENSUSE-SU-2026:10813-1
OPENSUSE-SU-2026:10864-1
OPENSUSE-SU-2026:21168-1
RHSA-2026:26174
RHSA-2026:26268
RHSA-2026:26269
RHSA-2026:26270
RHSA-2026:26491
RHSA-2026:26492
RHSA-2026:26493
RHSA-2026:26521
RHSA-2026:26536
RHSA-2026:26539
RHSA-2026:26551
RHSA-2026:26606
RHSA-2026:26629
RHSA-2026:26630
RHSA-2026:27715
Found an issue in the description? Have something to add? Feel free to write us 👾