Mitigation Bypass in the Security Component of Firefox and Firefox ESR
CVE-2026-8962

8.1HIGH

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
19 May 2026

What is CVE-2026-8962?

A vulnerability exists that allows for a mitigation bypass in the security component of Firefox. This flaw could lead to unintended access control issues, enabling malicious actors to potentially exploit protected areas. The issue has been addressed in Firefox version 151 and Firefox ESR version 140.11, highlighting the importance of keeping software updated to maintain security integrity.

Affected Version(s)

Firefox 140.11

Firefox 151

Thunderbird 140.11

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Manojkumar Jaganathan
.