CVE Catalog

CVE-2026-74968

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

2th percentile - higher than 2% of all known CVEs

Summary

Vulnerability in the Graphics: WebRender component causes a site isolation issue. It was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

Similar to other site isolation issues, an attacker could exploit this to bypass security and potentially access data from other sites.

Recommendation

Update Firefox or Thunderbird to the latest available version that includes the fix.

Original NVD description (English source)

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS