CVE-2026-16356 is a vulnerability in Mozilla Firefox
Published on July 21, 2026
Sandbox escape due to use-after-free in the Disability Access APIs component
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.
Products Associated with CVE-2026-16356
Want to know whenever a new CVE is published for Mozilla Firefox? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version 115.38, <= 115.* is unaffected.
- Version 140.13, <= 140.* is unaffected.
- Version 153, <= * is unaffected.