SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-74944

CRITICAL · CVSS 9.8 EPSS 0.40%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the DOM Core and HTML components of Firefox could allow an attacker to execute arbitrary code or crash the browser, potentially leading to unauthorized access or data leakage. Users running affected versions of Firefox should prioritize updating to Firefox 154, Firefox ESR 140.14, or Firefox ESR 153.1 to mitigate the risk. This issue is particularly relevant for organizations relying on Firefox for secure web browsing.

CVE
CVE-2026-74944
Severity
CRITICAL
CVSS
9.8
EPSS
0.40%
Firefox

Original NVD Description

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)