PT-2026-61919
CVE-2026-16407
·
Published
2026-07-21
·
Updated
2026-09-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 153
Thunderbird versions prior to 153
Description
A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page, enabling features such as push notifications and offline access.
Recommendations
Update Firefox to version 153.
Update Thunderbird to version 153.
Found an issue in the description? Have something to add? Feel free to write us 👾