Privilege Escalation Vulnerability in Firefox and Firefox ESR
CVE-2026-74985

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 18 August 2026

What is CVE-2026-74985?

A privilege escalation vulnerability exists in the Enterprise Policies component of Firefox. This flaw allows attackers to exploit the browser's capabilities, potentially gaining unauthorized access or control over user privileges. Mozilla addressed this issue by releasing updates in Firefox version 154 and Firefox ESR 153.1. Users are encouraged to update their browsers to the latest versions to mitigate any risks associated with this vulnerability.

Affected Version(s)

Firefox 153.1

Firefox 154

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2059825

https://www.mozilla.org/security/advisories/mfsa2026-74/

https://www.mozilla.org/security/advisories/mfsa2026-77/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2026
Vulnerability Reserved
Aug 17, 2026

Credit

The Mozilla Fuzzing Team

CVE-2026-74985 Data

JSON