CVE Catalog
CVE-2026-74979
CriticalCVSS 9.8Summary
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Risk Assessment
Bypassing security measures could allow installation of unauthorized add-ons or bypass security policies, potentially leading to browser integrity compromise.
Recommendation
Update Firefox and Thunderbird to versions containing the fixes.
Original NVD description (English source)
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.