Sandbox escape due to invalid pointer in the Disability Access APIs component
Published Jul 21, 2026
10.0
CRITICALCVSS 3.1
EPSS 0.38%
Description
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Affected products
No data.
- < 153.0.0
- < 153.0
No data.
Red Hat Enterprise Linux 10
firefox
Not affected
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Not affected
Red Hat Enterprise Linux 10
rhel10/thunderbird-flatpak
Not affected
Red Hat Enterprise Linux 10
thunderbird
Not affected
Red Hat Enterprise Linux 6
firefox
Not affected
Red Hat Enterprise Linux 6
thunderbird
Not affected
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 7
thunderbird
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
Red Hat Enterprise Linux 9
firefox
Not affected
Red Hat Enterprise Linux 9
thunderbird
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Not affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 9 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (10)
- https://access.redhat.com/security/cve/CVE-2026-16367 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=2050627 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2503428 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-46200 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-16367
- https://www.cve.org/CVERecord?id=CVE-2026-16367
- https://www.mozilla.org/security/advisories/mfsa2026-68/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-68/#CVE-2026-16367
- https://www.mozilla.org/security/advisories/mfsa2026-71/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-71/#CVE-2026-16367
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data