CVE-2026-100787
Critical · CVSS 9.6- CVSS
- 9.6
- nvd
- EPSS
- 0.32%
- 23th pct
- KEV
- No
- Class
- other
- CWE-20
Description
Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
References
Status: profiled · ingested 2026-10-05T18:00:53.000Z