CVE-2026-74942

Опубликовано: 18 авг. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=2056571
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-74/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-75/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-76/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-77/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-78/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-79/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-80/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 115.39.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 116.0 (включая) до 140.14.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.1.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 140.14.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.1.0 (исключая)

EPSS

Процентиль: 22%

0.00304

Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVE-2026-74942

CVSS3: 8.8

ubuntu

9 дней назад

(Privilege escalation in the Remote Settings Client component. This vul ...)

CVE-2026-74942

CVSS3: 7.5

redhat

10 дней назад

CVE-2026-74942

CVSS3: 8.8

debian

10 дней назад

Privilege escalation in the Remote Settings Client component. This vul ...

GHSA-f6x3-5q9f-gph4

CVSS3: 8.8

github

10 дней назад

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.

openSUSE-SU-2026:21594-1

suse-cvrf

9 дней назад

Security update for MozillaFirefox

EPSS

Процентиль: 22%

0.00304

Низкий

8.8 High

CVSS3

Дефекты

CWE-269