CVE-2026-0890 | Mozilla Firefox up to 146 Drag/Drop ui layer

January 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Mozilla Firefox up to 146. The affected element is an unknown function of the component Drag/Drop. Executing a manipulation can lead to improper restriction of rendered ui layers.

This vulnerability appears as CVE-2026-0890. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More