VulnSocial

CVE-2026-2760Disclosure(mozilla / firefox)

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

mozilla CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1384

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox
  • thunderbird

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 6 signals
  • Disclosure: 4 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 3 mentions (2026-02-28); latest day: 2
  • 6 total mentions across 3 days

Affected systems

Vendors
mozilla
Products
firefoxthunderbird

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-02-28: 3Mentions · 2026-03-01: 1Mentions · 2026-03-12: 2Patch / Workaround · 2026-03-12: 1Technical Details · 2026-02-28: 3Technical Details · 2026-03-01: 1Technical Details · 2026-03-12: 202-2803-0103-12
Signal classification3 categories
Disclosure
466.7%
General
116.7%
Patch
116.7%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-02-283
Disclosure2General1
2026-03-011
Disclosure1
2026-03-122
Disclosure1Patch1
Full discourse6 posts
  • ThreatCluster@threatcluster
    Patch

    Mozilla Firefox ESR 140.8.0 for SUSE and openSUSE fixes multiple flaws, including CVE-2026-2757 and sandbox escape CVE-2026-2760 in WebRTC and Graphics components. Patch promptly. #Firefox https://threatcluster.io/cluster/critical-security-update-for-mozilla-firefox-addresses-multi-bedaf5d9

    Post summary

    Mozilla Firefox ESR 140.8.0 for SUSE and openSUSE includes patches for CVE‑2026‑2757 and CVE‑2026‑2760, addressing sandbox escape flaws in WebRTC and Graphics components.

    0000066
    100 followersView on X
  • Ferramentas Linux@Cezar_H_Linux
    Disclosure

    The SUSE-SU-2026:0871-1 advisory for MozillaFirefox is out. It's a big one: 37 CVEs, including multiple sandbox escapes (CVE-2026-2760, -2768) that bypass browser security. Read more: 👉 https://tinyurl.com/mtuv8f7e #Security #SUSE https://t.co/f4rYxnzr5C

    Post summary

    The tweet announces a SUSE advisory covering 37 CVEs, notably sandbox escape vulnerabilities in Firefox, and directs readers to a link for further details.

    0000084
    1.3K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2760 (CVSS:10.0, CRITICAL) is Modified. Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Fir..https://nvd.nist.gov/vuln/detail/CVE-2026-2760 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2026-2760, a critical sandbox escape vulnerability in the WebRender component caused by boundary condition errors, without mentioning PoC, exploit code, or patch details.

    0000028
    173 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-2760 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ES… https://www.cve.org/CVERecord?id=CVE-2026-2760 ----- Traducción: CVE-2026-2760 Esc… http://infoflow.cloud`

    Post summary

    A new sandbox escape vulnerability (CVE-2026-2760) affecting Firefox versions is disclosed, with a brief description of the flaw but no PoC, exploit, or patch details provided.

    0000038
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2760 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ES… https://www.cve.org/CVERecord?id=CVE-2026-2760

    Post summary

    The text announces CVE-2026-2760, a sandbox escape in Firefox’s WebRender component affecting versions below 148 and ESR below 115.33, with no mention of PoC, exploit, or patch.

    00000641
    56.6K followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-2760 (CVSS:10.0, CRITICAL) is Modified. Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Fir..https://nvd.nist.gov/vuln/detail/CVE-2026-2760 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post offers a brief CVE disclosure with severity, affected component, and CVSS score but lacks details on exploits, patches, or PoC.

    0000037
    173 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillafirefox---
Appmozillathunderbird---
Appmozillathunderbird---

Explore more

Back to dashboardmozilla CVEsfirefox vulnerabilities