CVE-2026-16367
Mozilla FirefoxVulnerabilityCVSS 10.0Patched
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
No public exploitation has been reported so far. A fixed version is available (see the table below).
Recommended action: Update to the fixed version listed for your distribution using the native package manager.
Severity metrics
CVSS 3.1 : 10.0 CRITICAL
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected & fixed versions by distribution
Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.
| Distribution | Package | Affected | Fixed version | Status |
|---|---|---|---|---|
| openSUSE:Tumbleweed | MozillaFirefox | - | 153.0-1.1 | fixed |
| openSUSE:Tumbleweed | firefox-esr | - | 153.0-1.1 | fixed |