Security Advisory

CVE-2026-16367

10
CRITICAL

Vulnerability Description

Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Published Date July 21, 2026
Official Source NIST NVD Advisory