CVE-2026-92035
Awaiting Analysis
Awaiting Analysis - Queue
Graphics Component Boundary Condition Error Leads to Sandbox Escape in Firefox
Vulnerability report for CVE-2026-92035, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-15
Last updated on: 2026-10-05
Assigner: Mozilla Corporation
Description
Description
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mozilla | thunderbird | From 141.0 (inc) to 153.3.0 (exc) |
| mozilla | thunderbird | From 154.0 (inc) to 156.0 (exc) |
| mozilla | firefox | to 115.42.0 (exc) |
| mozilla | firefox | From 116.0 (inc) to 140.17.0 (exc) |
| mozilla | thunderbird | to 140.17.0 (exc) |
| mozilla | firefox | From 154.0.0 (inc) to 156.0.0 (exc) |
| mozilla | firefox | From 141.0 (inc) to 153.3.0 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
