CyberSec.Space Logo
Back to CVE Browser

CVE-2026-16377

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-07-21
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Affected Platforms (CPE)

📦
Mozilla

Firefox

< 140.13.0< 153.0.0
📦
Mozilla

Thunderbird

< 140.13.0>= 141.0 and < 153.0

References & Advisories

🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=2037770
🔗 https://www.mozilla.org/security/advisories/mfsa2026-68/
🔗 https://www.mozilla.org/security/advisories/mfsa2026-70/
🔗 https://www.mozilla.org/security/advisories/mfsa2026-71/
🔗 https://www.mozilla.org/security/advisories/mfsa2026-72/

Related Vulnerabilities

CVE-2026-164129.8

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we p...

CVE-2026-164119.8

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough...

CVE-2026-164109.8

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-164097.5

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.