Privilege Escalation in Firefox Security Component by Mozilla

CVE-2026-8970

What is CVE-2026-8970?

This vulnerability allows attackers to escalate privileges within the Security component of Firefox, potentially enabling unauthorized access to system functions or sensitive data. It is inherent to certain versions of Firefox, which were subsequently patched in Firefox 151 and Firefox ESR 140.11. Users are encouraged to update their browsers immediately to mitigate this risk. For more detailed information, refer to the official Mozilla advisories.

References