CVE-2026-92074 - Mitigation bypass in the Popup Blocker component

Back Back to CVE browser

HIGH

Mitigation bypass in the Popup Blocker component

Published Sep 15, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.12%

Description

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

Affected products

Red Hat Enterprise Linux 10

rhel10/thunderbird-flatpak

Not affected
Red Hat Enterprise Linux 10

thunderbird

Not affected
Red Hat Enterprise Linux 6

thunderbird

Not affected
Red Hat Enterprise Linux 7

thunderbird

Not affected
Red Hat Enterprise Linux 8

thunderbird

Not affected
Red Hat Enterprise Linux 9

thunderbird

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Not affected	n/a
Red Hat Enterprise Linux 10	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 6	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 7	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 8	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 9	thunderbird	Not affected	n/a

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (2)

CWE-693

CWE-807

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-92074		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=2063539
https://bugzilla.redhat.com/show_bug.cgi?id=2533805		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2026-92074
https://www.cve.org/CVERecord?id=CVE-2026-92074
https://www.mozilla.org/security/advisories/mfsa2026-90/
https://www.mozilla.org/security/advisories/mfsa2026-90/#CVE-2026-92074
https://www.mozilla.org/security/advisories/mfsa2026-93/
https://www.mozilla.org/security/advisories/mfsa2026-94/
https://www.mozilla.org/security/advisories/mfsa2026-94/#CVE-2026-92074
https://www.mozilla.org/security/advisories/mfsa2026-96/