Information Disclosure in Firefox Form Autofill Component by Mozilla
CVE-2026-74966

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 18 August 2026

What is CVE-2026-74966?

A vulnerability exists in the Form Autofill component of Firefox, which may lead to information disclosure. This issue was addressed in both Firefox version 154 and Firefox ESR version 153.1, ensuring that user data remained protected. Users are encouraged to update to the latest versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

Firefox 153.1

Firefox 154

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2054776

https://www.mozilla.org/security/advisories/mfsa2026-74/

https://www.mozilla.org/security/advisories/mfsa2026-77/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2026
Vulnerability Reserved
Aug 17, 2026

Credit

The Mozilla Fuzzing Team

CVE-2026-74966 Data

JSON