VULNERABILITY INTELLIGENCE

CVE-2026-75874

CVSS score10 CRITICAL
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-08-18
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.

Weakness classification

  • CWE-693: Protection Mechanism Failure

Primary references