SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-16391

HIGH · CVSS 7.5 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

The vulnerability in Firefox's IndexedDB component allows for information disclosure, potentially exposing sensitive user data. Organizations and individuals using affected versions of Firefox and Thunderbird should prioritize updates to versions 153 or 140.13 to mitigate the risk of unauthorized data access.

CVE
CVE-2026-16391
Severity
HIGH
CVSS
7.5
EPSS
0.32%
Firefox

Original NVD Description

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Related CVEs

Other vulnerabilities affecting the same vendor(s)