Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-16401: Firefox Data Loss Prevention Escalation Risk

CVE-2026-16401 CVE-2026-16401

Summary

A vulnerability in Firefox's Data Loss Prevention component allows an attacker to gain higher levels of access than intended. This could potentially allow hackers to access sensitive user data. Users should update to the latest version of Firefox, which includes a fix for this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	All versions

Original title

Privilege escalation in the Data Loss Prevention component

Original description

Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153.

Vulnerability type

CWE-269 Improper Privilege Management

https://bugzilla.mozilla.org/show_bug.cgi?id=2052565
https://www.mozilla.org/security/advisories/mfsa2026-68/

Published: 21 Jul 2026 · Updated: 23 Jul 2026 · First seen: 21 Jul 2026