CVE-2026-92033 — Firefox — Fixed in 156

High8.8 Published on Sep 15, 2026

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

Fixed versions

Choose the version for your installed product and release branch.

Product	Fixed versions
Firefox	156

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-269

Vendorsmozilla

Vendors	Product	Versions
mozilla	firefox mobile	< 156.0

Active exploitation of a critical Cisco ISE flaw highlights attacks through trusted software channels, Orkes, Discourse, libheif and AI plugins.

This product uses the NVD API but is not endorsed or certified by the NVD.