CyberRota Analysis
AI-GeneratedA critical use-after-free vulnerability in the Disability Access APIs component of Firefox allows for a sandbox escape, potentially enabling attackers to execute arbitrary code in the context of the user. Users of affected versions of Firefox and Thunderbird should prioritize updating to the latest releases to mitigate the risk of exploitation. Organizations relying on these applications for secure operations must act swiftly to protect their systems from potential attacks.
CVE
CVE-2026-16352
Severity
CRITICAL
CVSS
9.8
EPSS
0.39%
Firefox
Original NVD Description
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Related CVEs
Other vulnerabilities affecting the same vendor(s)