CVE Catalog
CVE-2026-74939
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Risk Assessment
An attacker may exploit the vulnerability to escalate privileges, potentially allowing control over navigation and access to user data.
Recommendation
Update Firefox or Thunderbird to a patched version.
Original NVD description (English source)
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.