AUGUST 21, 2026
Live Feed
Back to database
Case File

CVE-2026-74990

CRITICAL · CVSS 9.8 EPSS 0.52% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-08-21

CyberRota Analysis

AI-Generated

Multiple versions of Firefox, including Firefox ESR 115.38, 140.13, 153.0, and Firefox 153, contain internally identified bugs that may lead to memory corruption or other security issues, potentially allowing for exploitation. Users and organizations relying on these affected versions should prioritize upgrading to Firefox 154 or the respective patched ESR versions to mitigate the risk of potential attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-74990
Severity
CRITICAL
CVSS
9.8
EPSS
0.52%
Firefox

Original NVD Description

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)