CVE-2026-74977

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Integer overflow in the Graphics component in Firefox and Thunderbird. The issue was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

The organization is exposed to potential crashes or unauthorized memory access, which could lead to data integrity compromise or arbitrary code execution.

Recommendation

It is recommended to update Firefox and Thunderbird to the latest patched versions.

Original NVD description (English source)

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.