8.1
High
CVE-2026-74981 Site isolation issue in the Audio/Video: Web Codecs component
Description
Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 154 | earliest → < 154 | 154 |
| Firefox 153.1 | earliest → < 153.1 | 153.1 |
| Thunderbird 154 | earliest → < 154 | 154 |
| Thunderbird 153.1 | earliest → < 153.1 | 153.1 |