REDHAT-BUG-2517822: Medium severity Mozilla Firefox vulnerability

The vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Published Aug 18, 2026

Updated

Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Affected Software

3 affected components

Mozilla Firefox<154

Mozilla Firefox ESR 140.14<140.14

Mozilla Firefox ESR 153.1<153.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Mozilla Firefox (Networking: Cookies component) to a version that resolves this vulnerability.
Fixed in 154
Upgrade
Upgrade Mozilla Firefox ESR (Networking: Cookies component) to a version that resolves this vulnerability.
Fixed in 140.14
Upgrade
Upgrade Mozilla Firefox ESR (Networking: Cookies component) to a version that resolves this vulnerability.
Fixed in 153.1

Aug 18, 2026

Data Sourced

via Red Hat·12:47 PM

DescriptionSeverityAffected Software

The vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.