Mitigation Bypass in Firefox Enterprise Policies by Mozilla
CVE-2026-16390

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 21 July 2026

What is CVE-2026-16390?

This vulnerability involves a bypass in the Enterprise Policies component of Firefox, enabling unauthorized access or manipulation of policies meant to control the browser's behavior. Proper safeguards were not adequately enforced, which could lead to potential exploitation. This issue has been addressed in Firefox version 153 and Firefox ESR version 140.13, highlighting the importance of keeping software up to date to protect against security threats.

Affected Version(s)

Firefox 140.13

Firefox 153

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2044527

https://www.mozilla.org/security/advisories/mfsa2026-68/

https://www.mozilla.org/security/advisories/mfsa2026-70/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 20, 2026

Credit

Souma Ohsawa

CVE-2026-16390 Data

JSON