Privilege Escalation in Firefox by Mozilla
CVE-2026-100824

8.8HIGH

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
29 September 2026

What is CVE-2026-100824?

A privilege escalation vulnerability exists in the Places component of Firefox, enabling attackers to gain higher-level access than intended. This flaw has been addressed in specific updates of Firefox ESR and the latest versions of Firefox. It is critical for users to update their browsers to ensure their systems are secure against potential exploitation from this vulnerability.

Affected Version(s)

Firefox 153.4

Firefox 157

Thunderbird 153.4

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.