CVE-2026-16407

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Mitigation bypass in the DOM: Service Workers component in Firefox and Thunderbird. Fixed in version 153.

An attacker can exploit this vulnerability to bypass security measures and perform unauthorized operations in the browser context.

Update Firefox and Thunderbird to version 153 or later.

Original NVD description (English source)

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.