10

CVE-2026-4692

Sandbox escape in the Responsive Design Mode component

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox SwEdition esr Version < 115.34.0
Mozilla ≫ Firefox SwEdition - Version < 149.0
Mozilla ≫ Firefox SwEdition esr Version >= 128.0 < 140.9.0
Mozilla ≫ Thunderbird SwEdition esr Version < 140.9.0
Mozilla ≫ Thunderbird SwEdition - Version < 149.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.382
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 3.9 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA-ADP 9.6 2.8 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 7.5 1.6 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-653 Improper Isolation or Compartmentalization

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

https://www.mozilla.org/security/advisories/mfsa2026-20/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-21/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=2017643
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-23/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450748
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4692.json
https://access.redhat.com/errata/RHSA-2026:5930
https://access.redhat.com/errata/RHSA-2026:5931
https://access.redhat.com/errata/RHSA-2026:5932
https://access.redhat.com/errata/RHSA-2026:6188
https://access.redhat.com/errata/RHSA-2026:6342
https://access.redhat.com/errata/RHSA-2026:6917
https://access.redhat.com/errata/RHSA-2026:7837
https://access.redhat.com/errata/RHSA-2026:7838
https://access.redhat.com/errata/RHSA-2026:7839
https://access.redhat.com/errata/RHSA-2026:7840
https://access.redhat.com/errata/RHSA-2026:7841
https://access.redhat.com/errata/RHSA-2026:7842
https://access.redhat.com/errata/RHSA-2026:7843
https://access.redhat.com/errata/RHSA-2026:7845
https://access.redhat.com/errata/RHSA-2026:7858
https://access.redhat.com/errata/RHSA-2026:8284
https://access.redhat.com/errata/RHSA-2026:8285
https://access.redhat.com/errata/RHSA-2026:8286
https://access.redhat.com/errata/RHSA-2026:8287
https://access.redhat.com/errata/RHSA-2026:8288
https://access.redhat.com/errata/RHSA-2026:8289
https://access.redhat.com/errata/RHSA-2026:8290
https://access.redhat.com/errata/RHSA-2026:8315
https://access.redhat.com/errata/RHSA-2026:8427
https://access.redhat.com/errata/RHSA-2026:8850
https://access.redhat.com/security/cve/CVE-2026-4692