CVE-2026-74957

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Vulnerability in the Safe Browsing component involving a mitigation bypass. The flaw was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, and Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Risk Assessment

Bypassing Safe Browsing protections could expose users to malicious content that would normally be blocked, increasing the risk of infection.

Recommendation

Update Firefox or Thunderbird to the patched version.

Original NVD description (English source)

Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.