CVE-2026-74952

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

Risk Assessment

An attacker may exploit the vulnerability to escalate privileges, potentially allowing modification of the update process and installation of malware.

Recommendation

Update Firefox or Thunderbird to a patched version.

Original NVD description (English source)

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.