CVE-2026-74970

Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Affected

Mozilla · Firefox · Thunderbird

CVSS v3.1 CNA

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

0.16% chance of exploitation in the next 30 days, 5th percentile

Published

2026-08-18

Proof-of-concept exploits (1)

• defineid/Trespasser0★ · 2026-08-25

Security advisories

• https://www.mozilla.org/security/advisories/mfsa2026-74
• https://www.mozilla.org/security/advisories/mfsa2026-77
• https://www.mozilla.org/security/advisories/mfsa2026-78
• https://www.mozilla.org/security/advisories/mfsa2026-80

References

• CVE Record
• NVD entry

Related

• CVE-2026-6765
• CVE-2026-74943
• CVE-2026-74945