Description
Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.
Published: 2026-01-27
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Bypass of anti‑tracking privacy controls
Action: Patch Immediately
AI Analysis

Impact

The vulnerability is a mitigation bypass in Firefox's Privacy: Anti‑Tracking component. It allows malicious content or users to disable or circumvent the anti‑tracking enforcement, potentially undermining the browser’s privacy protections. This flaw is categorized as a Security Misconfiguration (CWE‑693).

Affected Systems

Mozilla Firefox on all versions prior to 147.0.2 is affected. The fix was released in Firefox 147.0.2. No other products or versions are listed in the CVE data.

Risk and Exploitability

CVSS v3.1 score 6.5 indicates moderate severity. EPSS <1% suggests a low probability of exploitation at the time of analysis. The vulnerability is not in the CISA KEV catalog. Attack vector is not explicitly stated in the CVE; based on the limited description it is inferred that local or remote exploitation via crafted web content or malicious user interaction may be possible. No additional privileges or conditions are identified in the provided data.

Generated by OpenCVE AI on April 15, 2026 at 15:36 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Firefox to version 147.0.2 or later
  • Ensure Firefox automatic updates are enabled to receive the fix promptly
  • Review Mozilla security advisories regularly and apply updates as they become available

Generated by OpenCVE AI on April 15, 2026 at 15:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Apr 2026 14:30:00 +0000

Type Values Removed Values Added
Description Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox < 147.0.2. Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.

Fri, 06 Feb 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 02 Feb 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 30 Jan 2026 18:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Wed, 28 Jan 2026 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-693
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 28 Jan 2026 12:30:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 27 Jan 2026 16:15:00 +0000

Type Values Removed Values Added
Description Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox < 147.0.2.
Title Mitigation bypass in the Privacy: Anti-Tracking component
References

Subscriptions

Mozilla Firefox
cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2026-04-13T13:53:06.118Z

Reserved: 2026-01-27T15:11:51.077Z

Link: CVE-2026-24868

cve-icon Vulnrichment

Updated: 2026-01-28T19:35:55.945Z

cve-icon NVD

Status : Modified

Published: 2026-01-27T16:16:36.173

Modified: 2026-04-13T15:17:19.340

Link: CVE-2026-24868

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-01-27T15:58:48Z

Links: CVE-2026-24868 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-15T18:00:15Z

Weaknesses