PatchDayAlert

CVE

CVE-2026-92055

0field notes · 1digest CVSS 8.8

The verdict

A privilege escalation bug in Firefox's DevTools component lets an attacker elevate privileges, potentially gaining code execution beyond the browser sandbox. The attacker likely needs to lure a user to a malicious page while DevTools is open or trick them into a specific interaction. Fixed in Firefox 156 and Firefox ESR 153.3.

Patch urgency · Patch within 24 hours


Daily digests