CVE-2026-74966

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

Information disclosure in the Form Autofill component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

May allow an attacker to access data entered in forms, compromising user privacy.

Recommendation

Update Firefox and Thunderbird to the patched versions.

Original NVD description (English source)

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.