CVE-2026-6772

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@mozilla.org

Published

2026-04-21

Last modified

2026-10-26

Weaknesses

CWE-754

Affected products

• Firefox (Mozilla)
• Thunderbird (Mozilla)

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=2026089
• https://www.mozilla.org/security/advisories/mfsa2026-30/
• https://www.mozilla.org/security/advisories/mfsa2026-31/
• https://www.mozilla.org/security/advisories/mfsa2026-32/
• https://www.mozilla.org/security/advisories/mfsa2026-33/
• https://www.mozilla.org/security/advisories/mfsa2026-34/