CVE-2026-74961

CriticalCVSS 9.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Side-channel vulnerability in the Web Audio component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

May allow an attacker to infer information about data processed by the browser, compromising confidentiality.

Update Firefox and Thunderbird to the patched versions.

Original NVD description (English source)

Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.