CVE Catalog
CVE-2026-74958
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.26%
18th percentile - higher than 18% of all known CVEs
Summary
Information disclosure in the WebRTC component in Firefox and Thunderbird. The issue was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Risk Assessment
The organization is exposed to leakage of sensitive information, which could lead to user privacy breaches or disclosure of internal data.
Recommendation
It is recommended to update Firefox and Thunderbird to the latest patched versions.
Original NVD description (English source)
Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.