← Back to CVE List
CVE-2026-74974NVD
Vulnerability Summary
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityLow
IntegrityLow
AvailabilityNone
External References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2061794
- https://www.mozilla.org/security/advisories/mfsa2026-74/
- https://www.mozilla.org/security/advisories/mfsa2026-75/
- https://www.mozilla.org/security/advisories/mfsa2026-76/
- https://www.mozilla.org/security/advisories/mfsa2026-77/
- https://www.mozilla.org/security/advisories/mfsa2026-78/
- https://www.mozilla.org/security/advisories/mfsa2026-79/
- https://www.mozilla.org/security/advisories/mfsa2026-80/