CVE-2026-74939

Published Aug 18, 2026·Updated Aug 21, 2026

NVD Description

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.

Public Exploits & PoCs1 found

PoC: CVE-2026-74939-escape-the-mac-n-cheese-box

Firefox content-to-parent IPDL privilege escalation (N-day, bug 2054416): forged PDocumentChannel with RemoteTypeOverride -> privilegedabout process placement, via mojo-port send-path injection from a compromised content process

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free