Description
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages6 packages
🔴Vulnerability Details
3OSVCVE-2026-4717: Privilege escalation in the Netmonitor component↗2026-03-24 GHSAGHSA-pqfx-cwf8-965q: Privilege escalation in the Netmonitor component↗2026-03-24 CVEListPrivilege escalation in the Netmonitor component↗2026-03-24 📋Vendor Advisories
6Red Hatfirefox: thunderbird: Privilege escalation in the Netmonitor component↗2026-03-24 DebianCVE-2026-4717: firefox - Privilege escalation in the Netmonitor component. This vulnerability affects Fir...↗2026 MozillaMozilla Foundation Security Advisory 2026-20: CVE-2026-4717↗ MozillaMozilla Foundation Security Advisory 2026-23: CVE-2026-4717↗ MozillaMozilla Foundation Security Advisory 2026-24: CVE-2026-4717↗ 🕵️Threat Intelligence
1WizCVE-2026-4717 Impact, Exploitability, and Mitigation Steps | Wiz↗ 💬Community
1BugzillaCVE-2026-4717 firefox: thunderbird: Privilege escalation in the Netmonitor component↗2026-03-24