REDHAT-BUG-2489209: Medium severity Firefox vulnerability

Published Jun 16, 2026

Updated

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152 and Firefox ESR 140.12.

Affected Software

1 affected component

Firefox=152, =140.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox / Firefox ESR (Security: Process Sandboxing) to a version that resolves this vulnerability.
Fixed in 152
Upgrade
Upgrade Firefox / Firefox ESR (Security: Process Sandboxing) to a version that resolves this vulnerability.
Fixed in 140.12

Event History

Jun 16, 2026

Data Sourced

via Red Hat·02:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2489209?

The severity of REDHAT-BUG-2489209 is medium with a score of 4.

What type of vulnerability is REDHAT-BUG-2489209?

REDHAT-BUG-2489209 is classified as an information disclosure and sandbox escape vulnerability.

How do I fix REDHAT-BUG-2489209?

To fix REDHAT-BUG-2489209, update to Firefox version 152 or Firefox ESR version 140.12.

When was REDHAT-BUG-2489209 published?

REDHAT-BUG-2489209 was published on June 16, 2026.

What component is affected by REDHAT-BUG-2489209?

The affected component in REDHAT-BUG-2489209 is the Security: Process Sandboxing in Firefox.