CVE-2026-16411

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Memory safety bugs in Firefox 152 that could allow arbitrary code execution. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Risk Assessment

An attacker could exploit these bugs to execute arbitrary code remotely, leading to full system compromise.

Recommendation

Update Firefox to version 153 and Thunderbird to version 153.

Original NVD description (English source)

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.