CVE-2026-8957
Privilege escalation in the Enterprise Policies component.
Published May 19, 2026 · updated Oct 14, 2026 · mozilla firefox
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Timeline
Detection, updates, and resolution for this record.
May 19, 2026 · NIST NVD
Detected
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Oct 14, 2026 · NIST NVD
Updated
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Affected
- cpe mozilla/firefoxversion unspecified
- cpe mozilla/thunderbirdversion unspecified
Sources
- CVE.orgCVE-2026-8957
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-8957
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2026-8957
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
nvd.nist.gov