EXPOSURES › CVE-2026-4689

CVE-2026-4689

CRITICAL

DETAIL

SourceNVD · cve Published2026-03-24 CVSS10.0 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-4689 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

mozilla · vendor firefox · product thunderbird · product

DESCRIPTION

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.