7.5
CVE-2026-74982
- EPSS 0.15%
- Veröffentlicht 18.08.2026 12:23:40
- Zuletzt bearbeitet 20.08.2026 18:16:50
- CVE-Watchlists
- Unerledigt
Denial-of-service in the Widget component
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMozilla
≫
Produkt
Firefox
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
HerstellerMozilla
≫
Produkt
Thunderbird
Version <=
153.*
Version
153.1
Status
unaffected
Version <=
*
Version
154
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.047 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
https://www.mozilla.org/security/advisories/mfsa2026-74/
https://www.mozilla.org/security/advisories/mfsa2026-77/
https://bugzilla.mozilla.org/show_bug.cgi?id=2051788
https://www.mozilla.org/security/advisories/mfsa2026-78/
https://www.mozilla.org/security/advisories/mfsa2026-80/