CVE-2026-74979 Mitigation bypass in the Add-ons Manager component

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74979

A mitigation bypass in Firefox/Thunderbird's Add-ons Manager allows a network-based attacker with no privileges to execute arbitrary code, achieving full confidentiality, integrity, and availability impact. Patches are available in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird ...