CVE-2026-74978

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Clickjacking vulnerability in the Widget component in Firefox and Thunderbird. The issue was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

The organization is exposed to clickjacking attacks that overlay transparent elements on the user interface, potentially leading to users unknowingly performing unwanted actions.

Recommendation

It is recommended to update Firefox and Thunderbird to the latest patched versions.

Original NVD description (English source)

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.