5.4
CVE-2026-74970
- EPSS 0.17%
- Veröffentlicht 18.08.2026 12:23:38
- Zuletzt bearbeitet 18.08.2026 19:17:13
- CVE-Watchlists
- Unerledigt
Site isolation issue in the Graphics component
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMozilla
≫
Produkt
Firefox
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
HerstellerMozilla
≫
Produkt
Thunderbird
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.066 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
|
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.
https://www.mozilla.org/security/advisories/mfsa2026-74/
https://www.mozilla.org/security/advisories/mfsa2026-77/
https://bugzilla.mozilla.org/show_bug.cgi?id=2056558
https://www.mozilla.org/security/advisories/mfsa2026-78/
https://www.mozilla.org/security/advisories/mfsa2026-80/