Race Condition in JS Engine, Firefox <154, fixed v154
CVE-2026-74984 Published on August 18, 2026
Race condition in the JavaScript Engine component
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Vulnerability Analysis
CVE-2026-74984 is exploitable with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is a Race Condition Vulnerability?
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.
CVE-2026-74984 has been classified to as a Race Condition vulnerability or weakness.
Products Associated with CVE-2026-74984
stack.watch emails you whenever new vulnerabilities are published in Mozilla Firefox or Mozilla Thunderbird. Just hit a watch button to start following.
Affected Versions
Mozilla Firefox:- Version 153.1, <= 153.* is unaffected.
- Version 154, <= * is unaffected.
- Version 153.1, <= 153.* is unaffected.
- Version 154, <= * is unaffected.