AUGUST 21, 2026
Live Feed
Back to database
Case File

CVE-2026-74988

CRITICAL · CVSS 9.8 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-08-21

CyberRota Analysis

AI-Generated

Firefox ESR 153.0 and Firefox 153 are vulnerable to potential memory corruption issues that could be exploited under certain conditions. Users and organizations relying on these versions should prioritize updating to Firefox 154 or Firefox ESR 153.1 to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-74988
Severity
CRITICAL
CVSS
9.8
EPSS
0.15%
Firefox

Original NVD Description

Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)