CVE-2026-74985 Mozilla CVE debrief

Who should care

Organizations and individuals using Mozilla products, specifically Firefox, Firefox ESR, and Thunderbird, should verify their inventory and apply updates to mitigate the vulnerability. This includes IT administrators, security teams, and individuals responsible for maintaining and securing these products. Additionally, developers and users of these products should be aware of the vulnerability and take necessary precautions to prevent exploitation.

Technical summary

CVE-2026-74985 is a critical vulnerability in the Enterprise Policies component of Mozilla products, including Firefox, Firefox ESR, and Thunderbird. The vulnerability has a CVSS score of 9.8 and allows for privilege escalation. It was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. Limited evidence suggests that this is a privilege escalation issue; further analysis is required to fully understand the vulnerability. The vulnerability affects the Enterprise Policies component, which could allow an attacker to gain elevated privileges.

Defensive priority

Mozilla products are widely used; verify your inventory for Firefox, Firefox ESR, and Thunderbird versions prior to 154, 153.1, and 154, 153.1 respectively; apply updates immediately if vulnerable.

Recommended defensive actions

• Verify your inventory for Firefox, Firefox ESR, and Thunderbird versions prior to 154, 153.1, and 154, 153.1 respectively.
• Apply updates immediately if vulnerable.
• Monitor for potential exploitation attempts.
• Review and update incident response plans.
• Perform a thorough review of system configurations and user privileges.
• Implement additional monitoring and logging to detect potential exploitation attempts.
• Conduct regular security audits to ensure compliance with organizational security policies.

Evidence notes

The CVE-2026-74985 record indicates a critical vulnerability in the Enterprise Policies component of Mozilla products, with a CVSS score of 9.8. It was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. Limited evidence suggests that this is a privilege escalation issue; further analysis is required to fully understand the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.