SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-16389

CRITICAL · CVSS 9.8 EPSS 0.44%

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A critical integer overflow vulnerability in the Libraries component of NSS affects Firefox, potentially allowing attackers to execute arbitrary code. Users of Firefox and Thunderbird should prioritize updates to versions 153 or later to mitigate the risk of exploitation. Organizations relying on these browsers for secure communications must address this vulnerability immediately to protect against potential attacks.

CVE
CVE-2026-16389
Severity
CRITICAL
CVSS
9.8
EPSS
0.44%
Firefox

Original NVD Description

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Related CVEs

Other vulnerabilities affecting the same vendor(s)