CVE-2026-2768
Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10
Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- CVSS
- 10
- EPSS
- 0.37% 29.3% percentile
- CISA KEV
- Not listed
- Published
- 2026.02.24