CVE-2026-92019

Summary

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox115.41 <= 115.*unaffected
MozillaFirefox140.16 <= 140.*unaffected
MozillaFirefox153.3 <= 153.*unaffected
MozillaFirefox156 <= *unaffected
MozillaThunderbird140.16 <= 140.*unaffected
MozillaThunderbird156 <= *unaffected

Weaknesses

References