Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

A use-after-free vulnerability in Firefox's Disability Access APIs component allows sandbox escape. This critical security flaw affects Firefox versions below 149 and Firefox ESR versions below 140.9. The vulnerability is tracked as CVE-2026-4688 and has been assigned a high criticality rating. Mozilla has released security advisories and patches to address this issue. The bug was reported through Mozilla's Bugzilla system and affects multiple Firefox distributions.