CVE-2026-0888: Information disclosure in the XML component
Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 147 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 147 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 147
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-0888?
The severity of CVE-2026-0888 is classified as medium due to its potential for information disclosure.
How do I fix CVE-2026-0888?
To fix CVE-2026-0888, update Firefox to version 147 or later.
Who is affected by CVE-2026-0888?
CVE-2026-0888 affects users of Firefox versions prior to 147.
What type of vulnerability is CVE-2026-0888?
CVE-2026-0888 is an information disclosure vulnerability in the XML component of Firefox.
Is CVE-2026-0888 patched in the latest Firefox version?
Yes, CVE-2026-0888 is patched in Firefox version 147.