Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Mozilla | Firefox | affected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Tue, 18 Aug 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-264 |
Tue, 18 Aug 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1. | |
| Title | Site isolation issue in the WebExtensions component | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2026-08-18T12:23:31.590Z
Reserved: 2026-08-17T11:58:22.429Z
Link: CVE-2026-74960
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-08-18T13:17:33.170
Modified: 2026-08-18T14:49:11.260
Link: CVE-2026-74960
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-18T14:15:07Z