CVE Catalog
CVE-2026-74942
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Risk Assessment
An attacker may exploit the vulnerability to escalate privileges, potentially allowing modification of remote settings and compromising configuration integrity.
Recommendation
Update Firefox or Thunderbird to a patched version.
Original NVD description (English source)
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.