CVE-2026-75874

CriticalCVSS 10.0

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

An attacker could exploit the sandbox escape to gain access to the system beyond browser restrictions, potentially leading to device compromise.

Immediately update Firefox and Thunderbird to version 154 or later.

Original NVD description (English source)

Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.