CVE-2026-0878

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

High · published January 13, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

⚡ A sneaky little bug in the Graphics: CanvasWebGL component could let attackers escape the sandbox! 🕵️‍♂️ Think of it like a performer at a magic show who finds a secret trapdoor to escape the stage while everyone else thinks they're still contained — it's unexpected and can lead to all sorts of mischief. This vulnerability could allow an attacker to break free from the browser's protective walls, potentially leading to unauthorized access to sensitive data or even full system compromise. Imagine your carefully guarded secrets suddenly open to prying eyes!

Put simply

Think of it like a performer at a magic show who finds a secret trapdoor to escape the stage while everyone else thinks they're still contained — it's unexpected and can lead to all sorts of mischief. The flaw stems from incorrect boundary conditions in the Graphics: CanvasWebGL component, enabling an attacker to execute arbitrary code outside the intended sandbox environment.

What to do

This vulnerability could allow an attacker to break free from the browser's protective walls, potentially leading to unauthorized access to sensitive data or even full system compromise. Imagine your carefully guarded secrets suddenly open to prying eyes! Update Firefox to version 147 or Firefox ESR to 140.7, and do the same for Thunderbird. Ensuring all affected applications are current will help keep your data safe and secure! You've got this! With these updates, you'll be bolstering your defenses and keeping those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2026-01-13T13:30Z
EPSS history
Timeline
  • 13 JAN 13:30Z
    Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
    cvelistv5