Vulnerability Details CVE-2026-16358
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.8%
CVSS Severity
CVSS v3 Score 9.8
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2040119
- https://www.mozilla.org/security/advisories/mfsa2026-68/
- https://www.mozilla.org/security/advisories/mfsa2026-69/
- https://www.mozilla.org/security/advisories/mfsa2026-70/
- https://www.mozilla.org/security/advisories/mfsa2026-71/
- https://www.mozilla.org/security/advisories/mfsa2026-72/