CVE details

CVE-2026-8401

Sandbox escape in the Profile Backup component.

• Severity: Critical
• CVSS: 9.8
• Published: 2026-05-12
• Fixed in: 150.0.3

Description

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Affected products

• Firefox · → 150.0.3

Overlaps: Firefox

Source

View on NVD

Check if your browser is affected