PT-2026-61901 · Mozilla · Nss+2

·

CVE-2026-16389

·

Published

2026-07-21

·

Updated

2026-08-31

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153
Description An integer overflow occurs in the Libraries component of NSS due to incorrect boundary conditions. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits.
Recommendations Update Firefox to version 153 or later. Update Thunderbird to version 153 or later.

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-16389
ECHO-F87A-91CC-01F2
OESA-2026-3502
OPENSUSE-SU-2026:11358-1
OPENSUSE-SU-2026:11373-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23411-1

Affected Products

Firefox
Nss
Thunderbird