CVE-2026-74937

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Summary

Use-after-free vulnerability in the JavaScript: GC component. It was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

May lead to unexpected browser termination or potential code execution, posing a threat to system integrity.

Recommendation

Update Firefox or Thunderbird to the latest patched version.

Original NVD description (English source)

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.