CVE-2026-4690 in Mozilla Firefox
Summary
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
Responsible
mozilla
Reservation
03/24/2026
Disclosure
03/24/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352739 | Mozilla Firefox XPCOM integer overflow | 190 | Not defined | Official fix | CVE-2026-4690 |