CVE-2026-0881

Severity

CRITICAL

CVSS

10.0

EPSS

0.00318

Risk score

40.11

CISA KEV

PoC

Published

2026-01-13

Modified

2026-07-15

First seen

2026-08-06

Aliases

CNVD-2026-23772, EUVD-2026-2087, GHSA-CW2J-6PVW-7G9V

Products

Mozilla Firefox <147, Mozilla Thunderbird <147

Sources

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.