CVE-2026-16389

CRITICAL SEVERITY

CVSS Score & Metrics

Base Score

9.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Published Date

July 21, 2026

Last Modified

July 22, 2026

CWE ID

CWE-190

Source

NVD

Vendor

Mozilla

Product

Firefox