PT-2026-76975 · Mozilla+1 · Firefox+2

·

CVE-2026-74942

·

Published

2026-08-18

·

Updated

2026-09-08

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 115.39 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1
Description Privilege escalation exists in the Remote Settings Client component.
Recommendations Update Firefox to version 154. Update Firefox ESR to version 115.39. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.

Fix

DoS

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:58897
ALSA-2026:58898
ALSA-2026:58899
ALSA-2026:65158
ALSA-2026:65159
ALSA-2026:65160
CVE-2026-74942
OESA-2026-3556
OESA-2026-3557
OESA-2026-3558
OESA-2026-3559
OESA-2026-3576
OESA-2026-3577
OPENSUSE-SU-2026:11546-1
OPENSUSE-SU-2026:11558-1
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:21594-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23304-1
SUSE-SU-2026:23411-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:3897-1

Affected Products

Firefox
Rocky Linux
Thunderbird