CVE-2026-16356

A critical use-after-free vulnerability in the Disability Access APIs component of Firefox allows attackers to escape the browser's sandbox, potentially leading to arbitrary code execution. Users of affected versions of Firefox and Thunderbird should prioritize updating to the patched releases (Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13) to mitigate the risk of exploitation. Organizations relying on these products for secure web browsing and communication must address this vulnerability immediately to protect against potential attacks.