VDB

CVE-2026-74961

CVE-2026-74961 PUBLISHED CVSS 9.1 CRITICAL

Reported by mozilla · Published August 18, 2026

Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Risk Scores

CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
MozillaFirefox153.1, 154
MozillaThunderbird153.1, 154
MozillaFirefox154, 153.1, 154
chainguardfirefox-esr-1400, 0, 0
MozillaThunderbird154, 153.1, 154

Timeline

  • Aug 18, 2026 Coalition ESS Score
  • Aug 18, 2026 CVE Published
  • Aug 24, 2026 EPSS Score
  • Aug 30, 2026 EPSS Score
  • Sep 5, 2026 Security Advisory
  • Sep 9, 2026 EPSS Score
  • Sep 15, 2026 EPSS Score
  • Sep 17, 2026 EPSS Score
  • Sep 18, 2026 EPSS Score
  • Sep 24, 2026 EPSS Score
  • Sep 26, 2026 EPSS Score
  • Sep 30, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›