CVE-2026-16362
HIGH
8,8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
416
Use After Free
StableCommon Consequences
Security Scopes Affected:
Integrity
Availability
Confidentiality
Potential Impacts:
Modify Memory
Dos: Crash, Exit, Or Restart
Read Memory
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages:
Memory-Unsafe, C, C++
Application
Firefox by Mozilla
Version Range Affected
To
140.13.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Firefox by Mozilla
Version Range Affected
To
153.0.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Thunderbird by Mozilla
Version Range Affected
To
140.13.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Thunderbird by Mozilla
Version Range Affected
From
141.0
(inclusive)
To
153.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://bugzilla.mozilla.org/show_bug.cgi?id=2043188
https://www.mozilla.org/security/advisories/mfsa2026-68/
https://www.mozilla.org/security/advisories/mfsa2026-70/
https://www.mozilla.org/security/advisories/mfsa2026-71/
https://www.mozilla.org/security/advisories/mfsa2026-72/