Vulnerability · Mozilla Firefox
CVE-2026-74985
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVSS score (v3.1)9.8Critical
Fixed in 153.1.0
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Mozilla Firefox | up to before 153.1.0 |
| Mozilla Thunderbird | up to before 153.1.0 |
Sources: NVD and CISA known exploited vulnerabilities catalogue.