Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
References
Configurations
Configuration 1 (hide)
|
History
30 Jun 2026, 03:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Apr 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. |
25 Mar 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CWE | CWE-120 |
24 Mar 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | (en) Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9. |
24 Mar 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-190 CWE-754 |
|
| First Time |
Mozilla
Mozilla firefox |
|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=2016375 - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2026-20/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2026-21/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2026-22/ - Vendor Advisory |
24 Mar 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-24 13:16
Updated : 2026-07-15 02:22
NVD link : CVE-2026-4690
Mitre link : CVE-2026-4690
CVE.ORG link : CVE-2026-4690
JSON object : View
Products Affected
mozilla
- firefox
