critical9.8
CVE-2026-92036
Incorrect boundary conditions in the Networking: HTTP component.
Impact
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 156.0.0 |
| Mozilla | Thunderbird | before 156.0 |