CyberRota Analysis
AI-GeneratedA critical vulnerability in Firefox and Thunderbird allows attackers to bypass the same-origin policy through the Networking: DNS component, potentially leading to unauthorized access to sensitive information. Organizations and users relying on these applications should prioritize updating to the patched versions (Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13) to mitigate the risk of exploitation.
CVE
CVE-2026-16381
Severity
CRITICAL
CVSS
9.1
EPSS
0.17%
Firefox
Original NVD Description
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Related CVEs
Other vulnerabilities affecting the same vendor(s)