Sandbox Escape Vulnerability in Firefox Accessibility Features

CVE-2026-8953

What is CVE-2026-8953?

A critical vulnerability has been identified in the Disability Access APIs of Firefox, which allows a sandbox escape via a use-after-free condition. This vulnerability can lead to unintended access to system resources, potentially compromising user security and privacy. The issue affects specific versions of Firefox, including Firefox 151 and Firefox ESR 115.36, and Firefox ESR 140.11. Updates have been released to mitigate the risks associated with this vulnerability, allowing users to enhance their browser security.

References