PT-2026-77023 · Mozilla+1 · Firefox+2

CVE-2026-74990

·

Published

2026-08-18

·

Updated

2026-09-08

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.38 Firefox ESR version 140.13 Firefox ESR version 153.0 Firefox version 153 Thunderbird ESR version 140.13 Thunderbird ESR version 153.0 Thunderbird version 153
Description Internal bugs were identified that exhibit evidence of memory corruption or other security-relevant defects, which could potentially be exploited.
Recommendations Update Firefox ESR 115.38 to version 115.39. Update Firefox ESR 140.13 to version 140.14. Update Firefox ESR 153.0 to version 153.1. Update Firefox 153 to version 154. Update Thunderbird ESR 140.13 to version 140.14. Update Thunderbird ESR 153.0 to version 153.1. Update Thunderbird 153 to version 154.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:58897
ALSA-2026:58898
ALSA-2026:58899
ALSA-2026:65158
ALSA-2026:65159
ALSA-2026:65160
CVE-2026-74990
OESA-2026-3556
OESA-2026-3557
OESA-2026-3558
OESA-2026-3559
OESA-2026-3576
OESA-2026-3577
OPENSUSE-SU-2026:11546-1
OPENSUSE-SU-2026:11558-1
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:21594-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23304-1
SUSE-SU-2026:23411-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:3897-1

Affected Products

Firefox
Rocky Linux
Thunderbird