Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade thunderbird | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade firefoxUpgrade firefox-debuginfoUpgrade firefox-debugsource | May 28, 2026 | May 7, 2026 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | May 10, 2026 | May 10, 2026 |
| Freebsd | — | Upgrade firefox-esrUpgrade thunderbirdUpgrade firefox | May 13, 2026 | May 8, 2026 |
| Mfsa2026 30 | — | Upgrade to Mozilla Firefox version 150.0 | May 10, 2026 | Apr 21, 2026 |
| Mfsa2026 36 | — | Upgrade to Mozilla Firefox ESR version 140.10.1 | May 10, 2026 | Apr 28, 2026 |
| Mfsa2026 41 | — | Upgrade to Mozilla Firefox ESR version 140.10.2 | May 7, 2026 | May 7, 2026 |
| Mfsa2026 42 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.35.2 | May 7, 2026 | May 7, 2026 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 140.10.1 | May 10, 2026 | Apr 21, 2026 |
| Redhat_linux | — | Upgrade firefox-debugsourceNo solution existsUpgrade firefoxUpgrade firefox-x11Upgrade firefox-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbird | Jul 17, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub