CVE-2026-4725 in Mozilla Firefox
Summary
Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149 and Thunderbird < 149.
Responsible
mozilla
Reservation
03/24/2026
Disclosure
03/24/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352775 | Mozilla Firefox Canvas2D use after free | 416 | Not defined | Official fix | CVE-2026-4725 |