PT-2026-77024

CVE-2026-75874

·

Published

2026-08-18

·

Updated

2026-09-30

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Thunderbird versions prior to 154
Description A sandbox escape exists in the Remote Settings Client component. A sandbox is a security mechanism for separating running programs, ensuring that code executing in a restricted environment cannot access the rest of the system.
Recommendations Update Firefox to version 154 or later. Update Thunderbird to version 154 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:67129
ALSA-2026:67133
ALSA-2026:68549
ALSA-2026:70642
ALSA-2026:73130
ALSA-2026:73971
CLSA-2026-1788696027
OESA-2026-3789
OESA-2026-3790
OESA-2026-3791
OESA-2026-3896
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:11666-1
OPENSUSE-SU-2026:11678-1
OPENSUSE-SU-2026:21853-1
SUSE-SU-2026:23784-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:4140-1
SUSE-SU-2026:4156-1
SUSE-SU-2026:4268-1
Found an issue in the description? Have something to add? Feel free to write us 👾