CVE-2026-92015

Published: Sep 15, 2026Modified: Sep 16, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (7)

https://bugzilla.mozilla.org/show_bug.cgi?id=2060235

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-90/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-91/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-92/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-93/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-94/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-95/

Source: security@mozilla.org

Timeline

No history available yet.