Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-24868 EUVD-2026-4816GHSA-9hp9-m3m3-mp2v

Mitigation bypass in the Privacy: Anti-Tracking component

Published Jan 27, 2026 · Updated Apr 13, 2026 · Assigned by mozilla

Description

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 147.0.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 147.0.2-1.1 openSUSE-SU-2026:10120-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 147.0.2-r0 —

Advisories 3

References