PT-2026-61879

CVE-2026-16367

Published

2026-07-21

Updated

2026-09-18

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153

Description A sandbox escape is possible due to an invalid pointer within the Disability Access APIs component. A sandbox is a security mechanism used to isolate running applications from the rest of the system to prevent malicious code from accessing sensitive data or resources.

Recommendations Update Firefox to version 153. Update Thunderbird to version 153.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416: Use After Free

CWE-787: Out-of-bounds Write

Related identifiers