Sandbox Escape Vulnerability in Firefox by Mozilla

CVE-2026-12294

What is CVE-2026-12294?

A recent vulnerability in Firefox's DOM: Workers component allows for a potential sandbox escape, which can lead to unauthorized access to sensitive information or system resources. This issue has been addressed in Firefox versions 152 and ESR versions 140.12 and 115.37, emphasizing the importance of keeping browser software updated to mitigate security risks. Affected users are advised to promptly update to the latest versions to ensure their devices remain secure.

References