Pointer Mismanagement in Firefox Security Component
CVE-2026-16409

7.5HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
21 July 2026

What is CVE-2026-16409?

A vulnerability exists in the Security: PSM component of Firefox that can lead to pointer mismanagement. This issue may cause unintended behavior and impacts the overall security posture of the affected versions. Users are advised to upgrade to Firefox 153 or later to mitigate this risk effectively. For more detailed information, refer to the Mozilla security advisories.

Affected Version(s)

Firefox 153

Thunderbird 153

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2052134
https://www.mozilla.org/security/advisories/mfsa2026-68/
https://www.mozilla.org/security/advisories/mfsa2026-71/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Artur Cygan
.