high7.5
CVE-2026-16374
Information disclosure in the Framework component in DevTools.
Impact
Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 140.13.0 before 153.0.0 |
| Mozilla | Thunderbird | before 140.13.0 from 141.0 before 153.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.mozilla.org/show_bug.cgi?id=2027519
- https://www.mozilla.org/security/advisories/mfsa2026-68/
- https://www.mozilla.org/security/advisories/mfsa2026-70/
- https://www.mozilla.org/security/advisories/mfsa2026-71/
- https://www.mozilla.org/security/advisories/mfsa2026-72/