CVE-2026-74960High· 8.1▾ TwilightSite isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-74934High· 7.5Site isolation issue in the Graphics: CanvasWebGL component
CVE-2026-74959Critical· 9.1Mitigation bypass in the Storage: Cache API component
CVE-2026-74957High· 8.1Mitigation bypass in the Safe Browsing component
CVE-2026-74948Medium· 6.5Information disclosure in the Graphics component
CVE-2026-74945Medium· 6.5Information disclosure in the Graphics: Text component
CVE-2026-18951High· 8.8A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator