CVE-2026-8952: Privilege escalation in the Application Update component
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151 - Upgrade
Upgrade
Mozilla Firefox (Application Update component)to a version that resolves this vulnerability.Fixed in 151 - Upgrade
Upgrade
Mozilla Thunderbird (Application Update component)to a version that resolves this vulnerability.Fixed in 151
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8945
- CVE-2026-8946
- CVE-2026-8947
- CVE-2026-8948
- CVE-2026-8949
- CVE-2026-8950
- CVE-2026-8951
- CVE-2026-8952
- CVE-2026-8953
- CVE-2026-8954
- CVE-2026-8955
- CVE-2026-8956
- CVE-2026-8957
- CVE-2026-8958
- CVE-2026-8959
- CVE-2026-8960
- CVE-2026-8961
- CVE-2026-8962
- CVE-2026-8963
- CVE-2026-8964
- CVE-2026-8965
- CVE-2026-8966
- CVE-2026-8967
- CVE-2026-8968
- CVE-2026-8969
- CVE-2026-8970
- CVE-2026-8971
- CVE-2026-8972
- CVE-2026-8973
- CVE-2026-8974
- CVE-2026-8975
Frequently Asked Questions
What is the severity of CVE-2026-8952?
CVE-2026-8952 has been classified as a privilege escalation vulnerability in the Application Update component.
How do I fix CVE-2026-8952?
To fix CVE-2026-8952, users should update to Firefox or Thunderbird version 151 or later.
Which products are affected by CVE-2026-8952?
CVE-2026-8952 affects Mozilla Firefox and Mozilla Thunderbird versions prior to 151.
What components are involved in CVE-2026-8952?
CVE-2026-8952 involves the Application Update component of the affected software.
Is CVE-2026-8952 still a threat if I'm using the latest version?
CVE-2026-8952 is no longer a threat if you are using Firefox or Thunderbird version 151 or later.