
CVE-2026-8970 Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. https://www.cve.org/CVERecord?id=CVE-2026-8970
Post summary
CVE-2026-8970 is a privilege‑escalation flaw in Firefox and Thunderbird’s Security component that has been fixed in the cited releases; no PoC or active exploitation is reported.

