Search: CVE-2026-74935

CVE-2026-74935 is a high-severity privilege escalation vulnerability in the DOM Networking component of Mozilla Firefox. It allows an unprivileged attacker to escalate privileges within the browser environment. This vulnerability was fixed in Firefox 154 and Firefox ESR versions 115.39, 140.14, and 153.1, as well as corresponding Thunderbird versions. The vulnerability has a CVSS score of 8.8, indicating a critical impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.