CVE-2026-84134
9.8 criticalEPSS 0.6%
Critical (9.8) in mozilla. EPSS 0.6% chance of exploitation in the next 30 days.
Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mozilla:firefox
- mozilla:thunderbird
References
Check your stackJSON