CVE Catalog
CVE-2026-74953
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Risk Assessment
An attacker may exploit the vulnerability to escalate privileges, potentially leading to session hijacking or cookie manipulation.
Recommendation
Update Firefox or Thunderbird to a patched version.
Original NVD description (English source)
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.