CVE-2026-74979

CriticalCVSS 9.8

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

Bypassing security measures could allow installation of unauthorized add-ons or bypass security policies, potentially leading to browser integrity compromise.

Recommendation

Update Firefox and Thunderbird to versions containing the fixes.

Original NVD description (English source)

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.