CVE-2026-6750 is a privilege escalation vulnerability found in the Graphics: WebRender component of Mozilla Firefox. The flaw allows an attacker to gain elevated privileges, which could lead to significant compromise of the affected system. This vulnerability was addressed and fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. The CVSS v3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, no privileges required, user interaction required, and high confidentiality, integrity, and availability impacts. The vendor advisory confirms the fix and recommends updating to the patched versions.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges within the Firefox process, potentially leading to arbitrary code execution or other high-impact outcomes such as full compromise of the affected application. The CVSS score of 8.8 reflects the high severity and the critical nature of the impact on confidentiality, integrity, and availability.

Mozilla has released official fixes for this vulnerability in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Users and administrators should update to these versions or later to remediate the vulnerability. No additional mitigation steps are required beyond applying the official patches.