Description
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-8401 ↗
- bugzilla.mozilla.org/show_bug.cgi ↗
- www.mozilla.org/security/advisories/mfsa2026-45/ ↗
- www.mozilla.org/security/advisories/mfsa2026-47/ ↗
- www.mozilla.org/security/advisories/mfsa2026-48/ ↗
- www.mozilla.org/security/advisories/mfsa2026-51/ ↗
- access.redhat.com/errata/RHSA-2026:21378 ↗
- access.redhat.com/errata/RHSA-2026:21380 ↗
- access.redhat.com/errata/RHSA-2026:21381 ↗
- access.redhat.com/errata/RHSA-2026:21382 ↗
- access.redhat.com/errata/RHSA-2026:22325 ↗
- access.redhat.com/errata/RHSA-2026:22643 ↗
- access.redhat.com/errata/RHSA-2026:26174 ↗
- access.redhat.com/errata/RHSA-2026:26268 ↗
- access.redhat.com/errata/RHSA-2026:26269 ↗
- access.redhat.com/errata/RHSA-2026:26270 ↗
- access.redhat.com/errata/RHSA-2026:26491 ↗
- access.redhat.com/errata/RHSA-2026:26492 ↗
- access.redhat.com/errata/RHSA-2026:26493 ↗
- access.redhat.com/errata/RHSA-2026:26521 ↗
- access.redhat.com/errata/RHSA-2026:26536 ↗
- access.redhat.com/errata/RHSA-2026:26539 ↗
- access.redhat.com/errata/RHSA-2026:26551 ↗
- access.redhat.com/errata/RHSA-2026:26606 ↗
- access.redhat.com/errata/RHSA-2026:26629 ↗
- access.redhat.com/errata/RHSA-2026:26630 ↗
- access.redhat.com/errata/RHSA-2026:27715 ↗
- access.redhat.com/security/cve/CVE-2026-8401 ↗
- bugzilla.redhat.com/show_bug.cgi ↗
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8401.json ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.