CVE-2026-7321

· NIST NVD ↗

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.

CRITICAL
CVSS severity
9.6
CVSS base score
2026-04-28
Published

CWE codes

CWE-120

Affected products

mozilla:firefoxmozilla:thunderbird

Sources