Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-74974

Опубликовано: 18 авг. 2026
Источник: debian
EPSS Низкий

Описание

Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed154.0-1package
firefox-esrfixed140.14.0esr-2package
thunderbirdfixed1:140.14.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74974

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/#CVE-2026-74974

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/#CVE-2026-74974

EPSS

Процентиль: 3%
0.00135
Низкий

Связанные уязвимости

CVSS3: 5.4
ubuntu
9 дней назад

(Same-origin policy bypass in the Graphics: ImageLib component. This vu ...)

CVSS3: 6.1
redhat
10 дней назад

Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 5.4
nvd
10 дней назад

Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 5.4
github
9 дней назад

Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.

suse-cvrf
9 дней назад

Security update for MozillaFirefox

EPSS

Процентиль: 3%
0.00135
Низкий