CVE-2026-75874

CRITICAL10.0

JSON export Create alert

Description

Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected products

References

MISChttps://bugzilla.mozilla.org/show_bug.cgi?id=2039972
VENDOR_ADVISORYhttps://www.mozilla.org/security/advisories/mfsa2026-74/
VENDOR_ADVISORYhttps://www.mozilla.org/security/advisories/mfsa2026-78/

Updated 21m ago · 8 sources