SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74949

HIGH · CVSS 8.8 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the Graphics: Canvas2D component of Firefox allows attackers to escalate privileges, potentially leading to arbitrary code execution. Users of affected Firefox versions should prioritize updating to Firefox 154, Firefox ESR 140.14, or Firefox ESR 153.1 to mitigate this high-severity risk. Organizations relying on Firefox for their operations should address this vulnerability promptly to protect against potential exploitation.

CVE
CVE-2026-74949
Severity
HIGH
CVSS
8.8
EPSS
0.31%
Firefox

Original NVD Description

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)