5.4
Medium
CVE-2026-92030 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Description
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 156 | earliest → < 156 | 156 |
| Firefox 153.3 | earliest → < 153.3 | 153.3 |
| Firefox 140.16 | earliest → < 140.16 | 140.16 |
| Thunderbird 156 | earliest → < 156 | 156 |
| Thunderbird 153.3 | earliest → < 153.3 | 153.3 |
| Thunderbird 140.16 | earliest → < 140.16 | 140.16 |