SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-74936

CRITICAL · CVSS 9.8 EPSS 0.40%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the JavaScript: WebAssembly component affects Firefox and Java, potentially allowing attackers to execute arbitrary code or cause application crashes. Users of these products, especially those running versions prior to Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1, should prioritize updates to mitigate the risk of exploitation.

CVE
CVE-2026-74936
Severity
CRITICAL
CVSS
9.8
EPSS
0.40%
Firefox Java

Original NVD Description

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-84642 HIGH CVE-2026-84641 HIGH CVE-2026-84640 HIGH CVE-2026-84639 CRITICAL CVE-2026-84637 CRITICAL CVE-2026-84145 HIGH