Paper/Archive/CVE-2026-74961

CVE-2026-74961

Mozilla Firefox — Side-channel in the Web Audio component

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

35

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 38.6.386 × 207.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Affected

ProductAffectedFixed inSource

Firefoxsee advisory153.1CNA

Thunderbirdsee advisory153.1CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=2050380 refmozilla.org/security/advisories/mfsa2026-74 refmozilla.org/security/advisories/mfsa2026-77 refmozilla.org/security/advisories/mfsa2026-78 refmozilla.org/security/advisories/mfsa2026-80