PT-2026-76974

CVE-2026-74941

·

Published

2026-08-18

·

Updated

2026-09-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1
Description Privilege escalation exists in the Graphics: CanvasWebGL component.
Recommendations Update Firefox to version 154. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:58897
ALSA-2026:58898
ALSA-2026:58899
ALSA-2026:65160
CLSA-2026-1788696027
OESA-2026-3556
OESA-2026-3557
OESA-2026-3558
OESA-2026-3559
OESA-2026-3576
OESA-2026-3577
OPENSUSE-SU-2026:11546-1
OPENSUSE-SU-2026:11558-1
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:21594-1
OPENSUSE-SU-2026:21713-1
RHSA-2026:64813
RHSA-2026:64814
RHSA-2026:65103
RHSA-2026:65105
RHSA-2026:65110
RHSA-2026:65111
RHSA-2026:65160
RHSA-2026:65442
RHSA-2026:65757
RHSA-2026:65764
RHSA-2026:65765
RHSA-2026:65888
SUSE-SU-2026:23304-1
SUSE-SU-2026:23411-1
SUSE-SU-2026:23590-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:3897-1
SUSE-SU-2026:4140-1
SUSE-SU-2026:4156-1
SUSE-SU-2026:4268-1
Found an issue in the description? Have something to add? Feel free to write us 👾