CVE-2026-74970

MediumCVSS 5.4

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Vulnerability in the Graphics component causes a site isolation issue. It was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

An attacker could exploit this vulnerability to bypass site isolation, potentially leading to data disclosure or unauthorized actions in the context of another site.

Recommendation

Update Firefox or Thunderbird to the latest available version that includes the fix.

Original NVD description (English source)

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.