CVE Catalog
CVE-2026-74949
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.31%
24th percentile - higher than 24% of all known CVEs
Summary
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Risk Assessment
An attacker may exploit the vulnerability to escalate privileges, potentially leading to arbitrary code execution or browser crash.
Recommendation
Update Firefox or Thunderbird to a patched version.
Original NVD description (English source)
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.