CVE-2026-74947
CVE-2026-74947
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-74947?
- CVE-2026-74947 is a high-severity vulnerability, classified under Release of Invalid Pointer or Reference. CVSS score: 8.8/10. Published 2026-08-18.
- How severe is CVE-2026-74947?
- High severity. CVSS v3 base score is 8.8 out of 10.