7.5
High
CVE-2026-74966 Information disclosure in the Form Autofill component
Description
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 154 | earliest → < 154 | 154 |
| Firefox 153.1 | earliest → < 153.1 | 153.1 |
| Thunderbird 154 | earliest → < 154 | 154 |
| Thunderbird 153.1 | earliest → < 153.1 | 153.1 |