CVE-2026-74989
Awaiting Analysis Awaiting Analysis - Queue

Memory Corruption in Firefox

Vulnerability report for CVE-2026-74989, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Mozilla Corporation

Description

Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mozilla firefox 154

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves internally found bugs in Firefox version 153 that may have allowed memory corruption or other security issues. These defects could potentially be exploited with sufficient effort. The issue was resolved in Firefox version 154.

Impact Analysis

If exploited, this vulnerability could lead to memory corruption or other security breaches, potentially allowing attackers to execute arbitrary code, access sensitive data, or cause system crashes.

Mitigation Strategies

Update Firefox to version 154 or later to address the vulnerability. Remove or disable any affected versions of Firefox from your system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74989. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart