Skip to content

CVE-2026-124861 Sandbox escape due to use-after-free in the Audio/Video: cubeb component

CriticalCVSS 9.6
Published
Updated
Exploit status
No public exploit known

Description

Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Affected products

No affected product data has been published yet.

References