PT-2026-27415 · Mozilla+1 · Firefox Esr+3
Satoki Tsuji
·
Published
2026-01-01
·
Updated
2026-04-17
·
CVE-2026-4717
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 149
Firefox ESR versions prior to 140.9
Thunderbird versions prior to 149
Thunderbird versions prior to 140.9
Description
A privilege escalation issue exists in the Netmonitor component. This allows for potential unauthorized access or control within the affected applications.
Recommendations
Update Firefox to version 149 or later.
Update Firefox ESR to version 140.9 or later.
Update Thunderbird to version 149 or later.
Update Thunderbird to version 140.9 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Firefox
Firefox Esr
Rocky Linux
Thunderbird