REDHAT-BUG-2517862: Medium severity Mozilla Firefox vulnerability
Published Aug 18, 2026
·Updated
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
Affected Software
3 affected components
Mozilla Firefox<154
Mozilla Firefox ESR 140.14<140.14
Mozilla Firefox ESR 153.1<153.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 154 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.14 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.1
Event History
Aug 18, 2026
Data Sourced
via Red Hat·12:56 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Firefox releases include the fix?
The fix is included in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
2
How can I determine whether a deployment has been remediated?
Check the installed Firefox version and confirm it has been updated to Firefox 154, Firefox ESR 140.14, or Firefox ESR 153.1, as applicable to the release channel in use.