CVE-2026-8972 is a high-severity privilege escalation vulnerability affecting the WebRTC Audio/Video component in Mozilla Firefox. The flaw allows an attacker to escalate privileges, potentially compromising the security context of the browser. Mozilla fixed this vulnerability in Firefox 151 and Thunderbird 151 as part of a broader security update addressing multiple high-impact bugs. The CVSS vector indicates the vulnerability is remotely exploitable without privileges and requires user interaction, with high impact on confidentiality, integrity, and availability. The vendor advisory explicitly states the fix is included in Firefox 151 and Thunderbird 151.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges within the Firefox browser environment, potentially leading to unauthorized access or control over browser processes. The CVSS score of 8.8 reflects a high impact on confidentiality, integrity, and availability. However, no known exploits in the wild have been reported as of the advisory date.

Mozilla has released official fixes for this vulnerability in Firefox 151 and Thunderbird 151. Users and administrators should update to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor's official patches. Patch status is confirmed by the Mozilla advisory. No additional mitigation steps are indicated beyond applying the update.