CVE-2026-74984

MediumCVSS 6.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Race condition vulnerability in the JavaScript Engine component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

May lead to unpredictable behavior of the browser or email client, potentially allowing an attacker to perform unauthorized operations.

Recommendation

Update Firefox and Thunderbird to the versions mentioned in the description to mitigate the vulnerability.

Original NVD description (English source)

Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.