Paper/Archive/CVE-2026-92057

CVE-2026-92057

Mozilla Firefox — Mitigation bypass in the Enterprise Policies component

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 16.5.165 × 203.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

Affected

ProductAffectedFixed inSource

Firefoxsee advisory153.3CNA

Thunderbirdsee advisory153.3CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=2065646 refmozilla.org/security/advisories/mfsa2026-90 refmozilla.org/security/advisories/mfsa2026-93 refmozilla.org/security/advisories/mfsa2026-94 refmozilla.org/security/advisories/mfsa2026-96