CVE-2026-74938

CriticalCVSS 9.1

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

Bypassing security measures could allow an attacker to exploit memory management flaws, potentially leading to code execution or browser integrity compromise.

Recommendation

Update Firefox and Thunderbird to versions containing the fixes.

Original NVD description (English source)

Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.