CVE-2026-92019

Published: Sep 15, 2026Modified: Oct 6, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

Affected (7)

Products: Mozilla: Firefox, Thunderbird

Mozilla

2 products

Firefox

Thunderbird

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	version < 115.41.0
Mozilla Firefox	116.0 ≤ version < 140.16.0
Mozilla Firefox	141.0 ≤ version < 153.3.0
Mozilla Firefox	154.0.0 ≤ version < 156.0.0
Mozilla Thunderbird	version < 140.16.0
Mozilla Thunderbird	141.0 ≤ version < 153.3.0
Mozilla Thunderbird	154.0 ≤ version < 156.0