Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4351 articles · 196743 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-74989EXPLOITEDPATCHED
mozilla · firefox

Internally found bugs fixed in Firefox 154

Description

Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

Affected Products

VendorProductVersions
mozillafirefox—

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
mozillathunderbirdcert_advisory90%
mozillafirefoxcert_advisory90%
mozillafirefox esrcert_advisory90%

References

  • https://bugzilla.mozilla.org/buglist.cgi?bug_id=2022257%2C2027351%2C2027380%2C2029289
  • https://bugzilla.mozilla.org/buglist.cgi?bug_id=2027388%2C2029750%2C2029794%2C2043298%2C2045126%2C2049810%2C2051741
  • https://www.mozilla.org/security/advisories/mfsa2026-74/
  • https://www.mozilla.org/security/advisories/mfsa2026-78/

Related News (3 articles)

Tier B
BSI Advisories5d ago
[NEU] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR6d ago
Multiples vulnérabilités dans les produits Mozilla (19 août 2026)
→ No new info (linked only)
Tier C
VulDB6d ago
CVE-2026-74989 | Mozilla Firefox up to 153 memory corruption
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
154
PublishedAug 18, 2026
Tags
code executionsandbox escapedata leakagesecurity bypass
Trending Score34
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-74979
Mitigation bypass in the Add-ons Manager component
Trending: 32
CRITICALCVE-2026-74961
Side-channel in the Web Audio component
Trending: 32
CRITICALCVE-2026-74940
Use-after-free in the Graphics: Text component
Trending: 32
CRITICALCVE-2026-74938
Mitigation bypass in the JavaScript: GC component
Trending: 32
CRITICALCVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component
Trending: 32

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 18, 2026
Discovered by ZDM
Aug 18, 2026
Actively Exploited
Aug 24, 2026
Exploit Available
Aug 24, 2026
Patch Available
Aug 24, 2026