EXPOSURES › CVE-2026-4688
CVE-2026-4688
CRITICAL
DETAIL
SourceNVD · cve
Published2026-03-24
CVSS10.0
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-4688 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.