CVE-2026-8972: Privilege escalation in the WebRTC: Audio/Video component
Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151 - Upgrade
Upgrade
Mozilla Firefox WebRTC (Audio/Video component)to a version that resolves this vulnerability.Fixed in 151 - Upgrade
Upgrade
Mozilla Thunderbird WebRTC (Audio/Video component)to a version that resolves this vulnerability.Fixed in 151
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8945
- CVE-2026-8946
- CVE-2026-8947
- CVE-2026-8948
- CVE-2026-8949
- CVE-2026-8950
- CVE-2026-8951
- CVE-2026-8952
- CVE-2026-8953
- CVE-2026-8954
- CVE-2026-8955
- CVE-2026-8956
- CVE-2026-8957
- CVE-2026-8958
- CVE-2026-8959
- CVE-2026-8960
- CVE-2026-8961
- CVE-2026-8962
- CVE-2026-8963
- CVE-2026-8964
- CVE-2026-8965
- CVE-2026-8966
- CVE-2026-8967
- CVE-2026-8968
- CVE-2026-8969
- CVE-2026-8970
- CVE-2026-8971
- CVE-2026-8972
- CVE-2026-8973
- CVE-2026-8974
- CVE-2026-8975
Frequently Asked Questions
What is the severity of CVE-2026-8972?
CVE-2026-8972 has been classified as a privilege escalation vulnerability.
How do I fix CVE-2026-8972?
To mitigate CVE-2026-8972, update to Firefox or Thunderbird version 151 or higher.
Which software is affected by CVE-2026-8972?
CVE-2026-8972 affects Mozilla Firefox and Mozilla Thunderbird versions prior to 151.
What component is involved in the CVE-2026-8972 vulnerability?
The vulnerability in CVE-2026-8972 pertains to the WebRTC Audio/Video component.
When was CVE-2026-8972 fixed?
CVE-2026-8972 was addressed in the updates released for Firefox and Thunderbird version 151.