CVE-2026-74948

MÉDIO 6.5CVE-2026-74948 · Published 18/08/2026 · updated 24/08/2026

Em resumo

CVE-2026-74948 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta firefox (mozilla), thunderbird (mozilla).
Chance de exploração nos próximos 30 dias (EPSS): 0.44%, maior que 38.4% das vulnerabilidades.
Correção: atualize para 140.14.0, 153.1.0, 115.39.0 ou posterior.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 116.0, < 140.14.0≥ 141.0, < 153.1.0< 115.39.0`	`140.14.0153.1.0115.39.0`
thunderbird mozilla	`≥ 141.0, < 153.1.0< 140.14.0`	`153.1.0140.14.0`

Description

Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

References

bugzilla.mozilla.org/show_bug.cgi · Permissions Required
mozilla.org/security/advisories/mfsa2026-74 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-75 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-76 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-77 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-78 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-79 · Vendor Advisory
mozilla.org/security/advisories/mfsa2026-80 · Vendor Advisory

Mais vulnerabilidades de firefox

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

≥ 116.0, < 140.14.0≥ 141.0, < 153.1.0< 115.39.0

140.14.0153.1.0115.39.0

thunderbird

mozilla

≥ 141.0, < 153.1.0< 140.14.0

153.1.0140.14.0

Mais vulnerabilidades de firefox

Ver tudo →