CVE-2026-74983
Public on 2026-08-18
Modified on 2026-09-10
Description
Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Firefox Extra | firefox | 2026-08-31 | ALAS2FIREFOX-2026-064 | Fixed |
| Amazon Linux 2023 | firefox | 2026-08-31 | ALAS2023-2026-2105 | Fixed |
| Amazon Linux 2027 Preview | firefox | Not Affected | ||
| Amazon Linux 2 - Firefox Extra | firefox-amzn-policies-generic | Not Affected | ||
| Amazon Linux 2 - Core | thunderbird | 2026-08-31 | ALAS2-2026-3880 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 3.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N |