Review reviewHigh
CVE-2026-8970
Mozilla Firefox, Thunderbird, firefox
Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
- CVSS
- 8.8
- EPSS
- - - percentile
- CISA KEV
- Not listed
- Published
- 2026.05.19