CVE-2026-16389

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Vulnerability in the Libraries component in NSS due to incorrect boundary conditions and integer overflow. Fixed in Firefox 153 and Thunderbird 153.

Risk of potential code execution or crash in applications using NSS, such as Firefox and Thunderbird.

Update Firefox to version 153 and Thunderbird to version 153.

Original NVD description (English source)

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.