This vulnerability involves privilege escalation within the WebRTC Audio/Video component of Mozilla Firefox. Privilege escalation vulnerabilities allow an attacker to gain higher-level permissions than intended. Mozilla fixed this vulnerability in Firefox 151 as part of a security advisory that addressed multiple vulnerabilities across various components. The vendor advisory categorizes the impact of CVE-2026-8972 as low, indicating limited potential for harm compared to other issues fixed in the same release. No CVSS score is provided for this vulnerability.

The impact is a potential privilege escalation in the WebRTC Audio/Video component, which could allow an attacker to gain elevated privileges within the Firefox process context. Mozilla classifies the impact of this specific vulnerability as low, suggesting that exploitation would have limited consequences relative to other vulnerabilities fixed in the same update. There are no known exploits in the wild targeting this vulnerability.

Mozilla has fixed this vulnerability in Firefox version 151. Users and administrators should update to Firefox 151 or later to remediate this issue. Since this is a client-side application vulnerability, applying the official update is the recommended and effective mitigation. No additional mitigations are specified or required beyond applying the update.