CVE-2026-74981

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Site isolation issue in the Audio/Video: Web Codecs component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Assessment

May allow breach of site isolation, increasing the risk of cross-site attacks.

Recommendation

Update Firefox and Thunderbird to the patched versions.

Original NVD description (English source)

Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.