Threat Intelligence Database

(Information disclosure in the Graphics: Text component. This vulnerabi ...)

(Information disclosure in the Graphics component. This vulnerability w ...)

(Integer overflow in the Graphics component. This vulnerability was fix ...)

Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74986 is a critical site isolation vulnerability in the CSS Parsing and Computation component of Mozilla Firefox. This issue allows information disclosure and affects Firefox versions prior to 154. The vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.

CVE-2026-74985 is a critical privilege escalation vulnerability in the Enterprise Policies component of Mozilla Firefox. This flaw allows an attacker to gain elevated privileges within the affected software. The issue was addressed and fixed in Firefox version 154 and Firefox ESR 153.1, as well as Thunderbird 154 and Thunderbird 153.1.

CVE-2026-74984 is a race condition vulnerability in the JavaScript Engine component of Mozilla Firefox. This flaw was addressed and fixed in Firefox version 154 and Firefox ESR 153.1, as well as Thunderbird 154 and Thunderbird 153.1. The vulnerability has a CVSS v3.1 score of 6.8, indicating a medium severity level. It allows an attacker to potentially cause a high impact on confidentiality and integrity but requires high attack complexity and user interaction. No known exploits are reported in the wild at this time.

CVE-2026-74982 is a denial-of-service vulnerability in the Widget component of Mozilla Firefox. This issue was resolved in Firefox version 154 and Firefox ESR 153.1, as well as Thunderbird 154 and Thunderbird 153.1. The vulnerability allows an attacker to cause a denial of service, impacting availability but not confidentiality or integrity.

CVE-2026-74981 is a high-severity site isolation vulnerability in the Audio/Video: Web Codecs component of Mozilla Firefox. It was addressed and fixed in Firefox version 154 and Firefox ESR 153.1, as well as Thunderbird 154 and Thunderbird 153.1. The vulnerability could allow an attacker to bypass site isolation protections, potentially leading to high confidentiality and integrity impacts. No known exploits in the wild have been reported.