EXPOSURES › CVE-2026-4692

CVE-2026-4692

CRITICAL

DETAIL

SourceNVD · cve Published2026-03-24 CVSS10.0 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-4692 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

mozilla · vendor firefox · product thunderbird · product

DESCRIPTION

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.