REDHAT-BUG-2517856: Medium severity Mozilla Firefox vulnerability
Published Aug 18, 2026
·Updated
Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
Affected Software
2 affected components
Mozilla Firefox
Mozilla Firefox ESR
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 154 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.14 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.1
Event History
Aug 18, 2026
Data Sourced
via Red Hat·12:56 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Firefox releases contain the fix?
The vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
2
Which component is affected?
The issue affects the Safe Browsing component in Mozilla Firefox and Mozilla Firefox ESR.