Firefox Android Privilege Escalation Vulnerability

CVE-2026-84117 is a privilege escalation vulnerability affecting Firefox for Android that allows attackers to gain elevated system permissions beyond their intended access level. This flaw is particularly concerning because mobile browsers often handle sensitive operations like authentication, payment processing, and access to device resources. Android users running Firefox versions prior to 155 are directly affected, making this a widespread threat across the mobile ecosystem where Firefox maintains a significant user base. The high CVSS score of 8.8 reflects the severity of allowing unprivileged processes to escalate their capabilities on a device.

While this CVE currently maps to CWE-284 (Improper Access Control) rather than specific MITRE ATT&CK techniques, Casky's 754 security skills—powered by Claude AI's extended reasoning—would detect the attack patterns associated with privilege escalation behaviors. Practitioners using Casky would identify reconnaissance activities (T1592: Gather Victim Host Information), exploitation attempts targeting the Firefox process boundary, and post-exploitation indicators like unexpected system permission requests or process spawning patterns. The platform's skill set enables detection of lateral movement attempts and credential access that typically follow successful privilege escalation, helping security teams correlate Firefox Android exploitation with broader attack chains even in the absence of formally mapped MITRE techniques.