Evil-DB LogoEvil-DB
← All CVEs

CVE-2026-0879

critical · 9.8

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

9.8
CVSS
0.6%
EPSS (exploit prob.)
48th
EPSS percentile
2026-01-13
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
mozillafirefox< 115.32.0
mozillafirefox< 147.0
mozillafirefox>= 128.0, < 140.7.0
mozillathunderbird< 140.7.0
mozillathunderbird< 147.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-0879