CVE Catalog
CVE-2026-74985
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.15%
5th percentile - higher than 5% of all known CVEs
Summary
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Risk Assessment
An attacker could exploit the privilege escalation to gain unauthorized access to the system or data, potentially leading to serious security breaches.
Recommendation
Update Firefox and Thunderbird to the versions mentioned in the description to receive security fixes.
Original NVD description (English source)
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.