cbcvebase.
CVE-2026-7321
published 2026-04-28

CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox…

critical9.6CVSS 3.1
AVNACLPRNUIRSCCHIHAH
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.

Affected

10 ranges
VendorProductVersion rangeFixed in
mozillafirefox< 140.10.1140.10.1
mozillafirefox< 150.0150.0
mozillafirefox——
mozillafirefox_esr< Firefox ESR 140.10.1Firefox ESR 140.10.1
mozillathunderbird< Thunderbird 140.10.1Thunderbird 140.10.1
mozillathunderbird< 140.10.1140.10.1
mozillathunderbird< 150.0150.0
mozillathunderbird——
rhel10firefox-flatpak——
rhel10thunderbird-flatpak——