CVE Catalog
CVE-2026-16382
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.43%
35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability in the DOM: Service Workers component in Firefox and Thunderbird allows bypassing security mitigations. This was fixed in Firefox 153 and Thunderbird 153.
Risk Assessment
An attacker could exploit this vulnerability to bypass Service Worker security measures, potentially leading to unauthorized network traffic interception or script execution in the context of other sites.
Recommendation
Update Firefox to version 153 or later and Thunderbird to version 153 or later.
Original NVD description (English source)
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.