Privilege Escalation in Firefox Notifications Component by Mozilla
CVE-2025-14323

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
9 December 2025

What is CVE-2025-14323?

A privilege escalation vulnerability exists in the Notifications component of Firefox, which allows an attacker to gain elevated access permissions. Affected versions include Firefox versions prior to 146, as well as Firefox ESR versions below 115.31 and 140.6. Users are advised to update to the latest version to safeguard against potential exploitation.

Affected Version(s)

Firefox < 146

Firefox ESR < 115.31

Firefox ESR < 140.6

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

tiebuchen
.
CVE-2025-14323 : Privilege Escalation in Firefox Notifications Component by Mozilla