CVE-2026-74937 | CyberRota

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the JavaScript: GC component affects Firefox and Java, potentially allowing attackers to execute arbitrary code or cause application crashes. Organizations using these products, particularly those running outdated versions prior to Firefox 154 or Firefox ESR 153.1, should prioritize patching to mitigate risks associated with this flaw.

CVE

CVE-2026-74937

Severity

HIGH

CVSS

8.8

EPSS

0.29%

Firefox Java

Original NVD Description

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-84642 HIGH CVE-2026-84641 HIGH CVE-2026-84640 HIGH CVE-2026-84639 CRITICAL CVE-2026-84637 CRITICAL CVE-2026-84145 HIGH