CVE Catalog

CVE-2026-16380

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Mitigation bypass in the Networking component in Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.

Risk Assessment

Risk of bypassing network security controls, potentially leading to unauthorized access or data leakage.

Recommendation

Update Firefox to version 153 or later and Thunderbird to version 153 or later.

Original NVD description (English source)

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS