CVEvulnerability

CVE-2026-74960

8.1 HIGH Published 2026-08-18 Modified 2026-08-24 Official page ↗
Status
Analyzed
Published
2026-08-18
Last modified
2026-08-24
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-284, CWE-346

Description

Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Affected configurations

• mozilla firefox (< 140.14.0) • mozilla firefox (>= 141.0 < 153.1.0) • mozilla thunderbird (< 140.14.0) • mozilla thunderbird (>= 141.0 < 153.1.0)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-346 Origin Validation Error weakness

References