critical10.0
CVE-2026-16367
Sandbox escape due to invalid pointer in the Disability Access APIs component.
Impact
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 153.0.0 |
| Mozilla | Thunderbird | before 153.0 |