Privilege Escalation in Nimbus Desktop Client by Mozilla

CVE-2026-124951

What is CVE-2026-124951?

A privilege escalation vulnerability was identified in the Nimbus Desktop Client, which could allow an attacker to gain elevated access to system resources that are normally protected. The issue was addressed in the recent updates of Firefox and Firefox ESR, specifically in versions 160 and 153.7 respectively. Users are strongly encouraged to upgrade their software to mitigate potential risks associated with this vulnerability.

References