CVE-2026-74950
Public on 2026-08-18
Modified on 2026-08-21
Description
Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Firefox Extra | firefox | Pending Fix | ||
| Amazon Linux 2023 | firefox | Pending Fix | ||
| Amazon Linux 2 - Firefox Extra | firefox-amzn-policies-generic | Not Affected | ||
| Amazon Linux 2 - Core | thunderbird | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |