CVE-2026-6772

Description

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

PUBLISHED Reserved 2026-04-21 | Published 2026-04-21 | Updated 2026-04-21 | Assigner mozilla

Product status

Credits

sseehra

References

bugzilla.mozilla.org/show_bug.cgi?id=2026089

www.mozilla.org/security/advisories/mfsa2026-30/

www.mozilla.org/security/advisories/mfsa2026-31/

www.mozilla.org/security/advisories/mfsa2026-32/

www.mozilla.org/security/advisories/mfsa2026-33/

www.mozilla.org/security/advisories/mfsa2026-34/

cve.org (CVE-2026-6772)

nvd.nist.gov (CVE-2026-6772)

Download JSON