CVE-2026-16357
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability in the Graphics component in Firefox and Thunderbird is due to incorrect boundary conditions. This was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Risk Assessment
An attacker could exploit this vulnerability to cause a browser crash or potentially execute malicious code through graphics manipulation, potentially leading to system compromise.
Recommendation
Update Firefox to version 153 or later, Firefox ESR to 115.38 or 140.13 depending on the branch, and Thunderbird to version 153 or 140.13.
Original NVD description (English source)
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.