SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-92064

UNKNOWN · CVSS N/A EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the Widget: Win32 component of Firefox allows for a sandbox escape due to incorrect boundary conditions, potentially enabling attackers to execute arbitrary code outside the intended security confines. Users of affected Firefox versions should prioritize updating to Firefox 156 or Firefox ESR 153.3 to mitigate the risk of exploitation. This issue is particularly relevant for organizations relying on Firefox for secure browsing, as it may expose sensitive data or system resources.

CVE
CVE-2026-92064
Severity
UNKNOWN
CVSS
N/A
EPSS
0.14%
Firefox

Original NVD Description

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.