Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.