Back to feed
EUVD-2026-88953 · Published Sep 29, 2026 · 3w ago
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
Technologies
Mozilla ThunderbirdMozilla Firefox
Weaknesses
CWE-416
CVSS scores
- v3.19.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
