EXPOSURES › CVE-2026-2776

CVE-2026-2776

CRITICAL

DETAIL

SourceNVD · cve Published2026-02-24 CVSS10.0 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-2776 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

mozilla · vendor firefox · product thunderbird · product

DESCRIPTION

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.