CVE-2026-16408

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Integer overflow in the Audio/Video: Playback component in Firefox and Thunderbird. Fixed in versions 153.

May lead to crashes or potentially remote code execution during media playback.

Update Firefox and Thunderbird to version 153 or later.

Original NVD description (English source)

Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.