8.1
CVE-2026-74978
- EPSS 0.25%
- Veröffentlicht 18.08.2026 12:23:39
- Zuletzt bearbeitet 18.08.2026 19:17:15
- CVE-Watchlists
- Unerledigt
Clickjacking issue in the Widget component
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMozilla
≫
Produkt
Firefox
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
HerstellerMozilla
≫
Produkt
Thunderbird
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.163 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
|
CWE-1021 Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
https://www.mozilla.org/security/advisories/mfsa2026-74/
https://www.mozilla.org/security/advisories/mfsa2026-77/
https://bugzilla.mozilla.org/show_bug.cgi?id=2036097
https://www.mozilla.org/security/advisories/mfsa2026-78/
https://www.mozilla.org/security/advisories/mfsa2026-80/