cbcvebase.
CVE-2026-6766
published 2026-04-21

CVE-2026-6766: Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Affected

9 ranges
VendorProductVersion rangeFixed in
mozillafirefox< Firefox 150Firefox 150
mozillafirefox< 140.10.0140.10.0
mozillafirefox< 150.0150.0
mozillafirefox——
mozillafirefox_esr< Firefox ESR 140.10Firefox ESR 140.10
mozillathunderbird< Thunderbird 140.10Thunderbird 140.10
mozillathunderbird< Thunderbird 150Thunderbird 150
mozillathunderbird< 140.10.0140.10.0
rhel10firefox-flatpak——