CVE-2026-8957 Security Details

CVE ID

CVE-2026-8957

CWE

CWE-269

CVE Description

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Published

May 20, 2026

CVSS Score & Severity

8.1High

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

EPSS Score

0.044%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

Bugzilla #2033850PROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT