CVE-2026-6753

תיאור (מקור, אנגלית)

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

מדדים

CVSS 3.1

7.3 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-29/7/2026

CWE

CWE-119, CWE-787

מוצרים מושפעים

mozilla: firefox; mozilla: thunderbird

קישורים

• https://www.mozilla.org/security/advisories/mfsa2026-30/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-32/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-33/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-34/ Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=2027501 Permissions Required
• https://access.redhat.com/errata/RHSA-2026:10757
• https://access.redhat.com/errata/RHSA-2026:10766
• https://access.redhat.com/errata/RHSA-2026:10767
• https://access.redhat.com/errata/RHSA-2026:12285
• https://access.redhat.com/errata/RHSA-2026:13537