HIGHVulnerability
CVE-2026-74949
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Properties
- severity
- HIGH
- score
- 8.8
- epss_score
- 0.00312
- cve_id
- CVE-2026-74949
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- published_at
- 2026-08-18T13:17:31.683
- last_modified
- 2026-09-01T22:17:11.700
- epss_percentile
- 0.23604
Related Entities (5)
ENRICHED_BY (1)
→[Source]FIRST EPSS
AFFECTS_PRODUCT (2)
→[Product]
→[Product]
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Use After Free
Explore deeper with Ninja Signal's threat intelligence graph