CVE-2026-16391
Mozilla Firefox, Thunderbird, firefox
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
- CVSS
- 7.5
- EPSS
- 0.32% 24.7% percentile
- CISA KEV
- Not listed
- Published
- 2026.07.21