Threats tagged 'ghsa-xj6v-33q6-wvxj'

CVE-2026-16353 is a critical security vulnerability involving an invalid pointer in the DOM: Bindings (WebIDL) component of Mozilla Firefox and Thunderbird. This flaw was addressed and fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. The vulnerability could lead to memory corruption issues. No known exploits in the wild have been reported. The fix is officially available from Mozilla as part of their security advisories.