A vulnerability labeled as problematic has been found in Mozilla Firefox up to 146. The affected element is an unknown function of the component Drag/Drop. Executing a manipulation can lead to improper restriction of rendered ui layers.
This vulnerability appears as CVE-2026-0890. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
