The vulnerability identified as CVE-2026-74978 is a clickjacking issue affecting the Widget component of Mozilla Firefox. Clickjacking vulnerabilities allow an attacker to trick users into clicking on UI elements that are hidden or disguised, potentially leading to unintended actions. Mozilla fixed this vulnerability in Firefox 154 and Firefox ESR 153.1 as part of a comprehensive security update addressing numerous vulnerabilities. The vendor advisory explicitly lists this CVE among other security issues fixed in these versions.

Successful exploitation of this clickjacking vulnerability could allow an attacker to deceive users into interacting with hidden or disguised UI elements, potentially leading to unauthorized actions within the browser context. However, the impact is rated as low by Mozilla, indicating limited potential for severe damage compared to other vulnerabilities fixed in the same release.

Users and administrators should update Mozilla Firefox to version 154 or later, or Firefox ESR 153.1 or later, to remediate this vulnerability. Since the vendor advisory confirms the issue is fixed in these versions, applying the official update is the recommended and effective mitigation. No additional mitigation steps are indicated by the vendor.