Threats Tagged 'ghsa-q349-h7pm-p486'

CVE-2026-109764 is a medium severity vulnerability in Mozilla Firefox's Enterprise Policies component that allows mitigation bypass. The issue affects Firefox versions prior to 158 and Firefox ESR versions prior to 153.5. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. The vulnerability has a CVSS score of 5.4, indicating a moderate impact with low complexity to exploit but requiring user interaction. No known exploits are reported in the wild.