Mozjs52: (Information disclosure in the Graphics: Text component. (CVE-2026-74945)

This vulnerability (CVE-2026-74945) involves information disclosure in the Graphics: Text component of Firefox. It was reported by Abdulaziz Alasaiqah and fixed in Firefox 154 and Firefox ESR 115.39, 140.14, and 153.1. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) indicates that the vulnerability is remotely exploitable over the network with low attack complexity, no privileges required, but requires user interaction. The impact is high confidentiality loss without integrity or availability impact. The vendor advisory confirms the fix and categorizes the impact as high. No known exploits in the wild have been reported.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from the Graphics: Text component in Firefox. The confidentiality impact is high, but there is no impact on integrity or availability. The vulnerability can be triggered remotely without privileges but requires user interaction.

Mozilla has released official fixes for this vulnerability in Firefox 154 and Firefox ESR versions 115.39, 140.14, and 153.1. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation actions are required beyond applying the official patches.