SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-74938

CRITICAL · CVSS 9.1 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A mitigation bypass vulnerability in the JavaScript garbage collection component affects Firefox and Java, potentially allowing attackers to exploit memory management flaws. Users of affected versions should prioritize updating to Firefox 154 or Firefox ESR 153.1 to safeguard against potential exploitation. This is particularly critical for organizations relying on these browsers for web applications and services.

CVE
CVE-2026-74938
Severity
CRITICAL
CVSS
9.1
EPSS
0.32%
Firefox Java

Original NVD Description

Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)