CVE-2026-74947
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Aug 18, 2026
CISA due date
—
The record
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112893 Pillow is a Python imaging library. CWE-763
- CVE-2026-98160 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs… CWE-763
- CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. CWE-763
- CVE-2026-84131 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2023-20511 Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a… CWE-763
- CVE-2026-19315 A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a… CWE-763
- CVE-2026-57248 When the application opens a PDF file and JavaScript writes annotation attributes, there… CWE-763
- CVE-2026-9516 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM… CWE-763