CVE-2026-74959

Опубликовано: 18 авг. 2026

Источник: redhat

CVSS3: 6.1

EPSS Низкий

Описание

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Under investigation
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Under investigation
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2026:58899	24.08.2026
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2026:65159	08.09.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2026:64813	08.09.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2026:65633	08.09.2026
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2026:65442	08.09.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-807

https://bugzilla.redhat.com/show_bug.cgi?id=2517849firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

EPSS

Процентиль: 40%

0.00479

Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2026-74959

CVSS3: 9.1

ubuntu

2 месяца назад

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74959

CVSS3: 9.1

nvd

2 месяца назад

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVE-2026-74959

CVSS3: 9.1

debian

2 месяца назад

Mitigation bypass in the Storage: Cache API component. This vulnerabil ...

GHSA-hq5h-hpvx-rq86

CVSS3: 9.1

github

2 месяца назад

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

RLSA-2026:65159

rocky

около 2 месяцев назад

Important: thunderbird security update

EPSS

Процентиль: 40%

0.00479

Низкий

6.1 Medium

CVSS3