9.8
Critical
CVE-2026-6771 Mitigation bypass in the DOM: Security component
Description
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 150 | earliest → < 150 | 150 |
| Firefox 140.10 | earliest → < 140.10 | 140.10 |
| Thunderbird 150 | earliest → < 150 | 150 |
| Thunderbird 140.10 | earliest → < 140.10 | 140.10 |