CVE-2026-74972

Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74972 Information disclosure in the DOM: Push Subscriptions component

Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74972

Mozilla Firefox's DOM Push Subscriptions component exposes sensitive information. Affected versions are fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1. No exploitation details are provided; users should upgrade to patched versions. Mozilla advisory: https://www.mozilla.org/securi...