Mitigation Bypass in Firefox Enterprise Policies by Mozilla

CVE-2026-16390

What is CVE-2026-16390?

This vulnerability involves a bypass in the Enterprise Policies component of Firefox, enabling unauthorized access or manipulation of policies meant to control the browser's behavior. Proper safeguards were not adequately enforced, which could lead to potential exploitation. This issue has been addressed in Firefox version 153 and Firefox ESR version 140.13, highlighting the importance of keeping software up to date to protect against security threats.

References