Dashboard / CVE-2026-74950

CVE-2026-74950

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-08-18 Modified: 2026-10-28 First seen: 2026-10-29 Status: pending_score

Description

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
mozilla firefox < 153.1.0
mozilla firefox < 154.0.0
mozilla thunderbird < 153.1.0
mozilla thunderbird < 154.0

References & Advisories (5)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.41%
Raw Score 0.004150
Percentile 35.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00415
2026-10-28
0.00415

Intelligence Sources

mitre ref →

External Links