CVE-2026-6761
Privilege escalation in the Networking component
High · published April 21, 2026
What it is
Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00415 · 34.8th percentile
- Published
- 2026-04-21T12:40Z
EPSS history
Timeline