7.5
High
CVE-2026-2803 Information disclosure, mitigation bypass in the Settings UI component
Description
Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 148 | earliest → < 148 | 148 |
| Thunderbird 148 | earliest → < 148 | 148 |