CVE-2026-74970
CVE-2026-74970
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-74970?
- CVE-2026-74970 is a medium-severity vulnerability, classified under Origin Validation Error. CVSS score: 5.4/10. Published 2026-08-18.
- How severe is CVE-2026-74970?
- Medium severity. CVSS v3 base score is 5.4 out of 10.