CVE-2026-74984

6.8 mediumEPSS 0.3%

Medium (6.8) in mozilla. EPSS 0.3% chance of exploitation in the next 30 days.

Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2026-08-18
Modified: 2026-08-25
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:thunderbird

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2053670
https://www.mozilla.org/security/advisories/mfsa2026-74/
https://www.mozilla.org/security/advisories/mfsa2026-77/
https://www.mozilla.org/security/advisories/mfsa2026-78/
https://www.mozilla.org/security/advisories/mfsa2026-80/

Check your stack JSON