CVE-2026-6753

Summary

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox140.10 <= 140.*unaffected
MozillaFirefox150 <= *unaffected
MozillaThunderbird140.10 <= 140.*unaffected
MozillaThunderbird150 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

firefox: thunderbird: Incorrect boundary conditions in the WebRTC component

Additional References

References