Executive brief
A security vulnerability in the Firefox web browser could allow an attacker to bypass built-in security protections. This component is responsible for enforcing safety rules on websites, and a bypass could potentially lead to unauthorized access to data or the circumvention of privacy controls. Users should update to Firefox 152 or later to ensure these protections remain effective.
Technical details
A mitigation bypass vulnerability exists in the DOM: Security component of Mozilla Firefox. The flaw allows for the circumvention of security mechanisms designed to protect the Document Object Model (DOM). While specific exploitation details are restricted in the associated bug report (Bug 2045496), such bypasses typically allow attackers to evade security headers or origin-based restrictions. The vulnerability is reachable via web content and requires a user to visit a malicious or compromised site. Mozilla has addressed this issue in Firefox version 152.
Affected products
- Mozilla Firefox < 152
Timeline
- 2026-06-16: disclosed
- 2026-06-16: patched