Sandbox Escape Vulnerability in Mozilla Firefox and ESR Versions

CVE-2026-12297

What is CVE-2026-12297?

A potential sandbox escape was discovered in the Networking component of Mozilla Firefox, caused by incorrect boundary conditions. This vulnerability allows for unintended data leakage and could enable attackers to execute certain operations outside the rigorously defined sandbox environment. Mozilla has addressed this issue by releasing updates in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37, enhancing the security integrity of the affected products.

References