Incorrect boundary conditions in the WebRTC component
Published Apr 21, 2026
7.5
HIGHCVSS 3.1
EPSS 0.46%
Description
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Affected products
No data.
No data.
Red Hat Enterprise Linux 10
firefox-0:140.10.0-1.el10_1
Fixed · RHSA-2026:10767
Red Hat Enterprise Linux 10
firefox-0:140.10.0-1.el10_2
Fixed · RHSA-2026:19041
Red Hat Enterprise Linux 10
thunderbird-0:140.10.0-1.el10_1
Fixed · RHSA-2026:12285
Red Hat Enterprise Linux 10
thunderbird-0:140.10.0-1.el10_2
Fixed · RHSA-2026:19131
Red Hat Enterprise Linux 10.0 Extended Update Support
firefox-0:140.10.0-1.el10_0
Fixed · RHSA-2026:17690
Red Hat Enterprise Linux 10.0 Extended Update Support
thunderbird-0:140.10.0-1.el10_0
Fixed · RHSA-2026:19463
Red Hat Enterprise Linux 7 Extended Lifecycle Support
firefox-0:140.10.0-2.el7_9
Fixed · RHSA-2026:19704
Red Hat Enterprise Linux 8
firefox-0:140.10.0-1.el8_10
Fixed · RHSA-2026:10766
Red Hat Enterprise Linux 8
thunderbird-0:140.10.0-1.el8_10
Fixed · RHSA-2026:13537
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
firefox-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
thunderbird-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
firefox-0:140.10.0-1.el8_8
Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
thunderbird-0:140.10.0-1.el8_8
Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
firefox-0:140.10.0-1.el8_8
Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el8_8
Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 9
firefox-0:140.10.0-1.el9_7
Fixed · RHSA-2026:10757
Red Hat Enterprise Linux 9
firefox-0:140.10.0-1.el9_8
Fixed · RHSA-2026:19201
Red Hat Enterprise Linux 9
thunderbird-0:140.10.0-1.el9_7
Fixed · RHSA-2026:15892
Red Hat Enterprise Linux 9
thunderbird-0:140.10.1-1.el9_8
Fixed · RHSA-2026:19348
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
firefox-0:140.10.0-1.el9_0
Fixed · RHSA-2026:17687
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el9_0
Fixed · RHSA-2026:19468
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
firefox-0:140.10.0-1.el9_2
Fixed · RHSA-2026:17689
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el9_2
Fixed · RHSA-2026:19461
Red Hat Enterprise Linux 9.4 Extended Update Support
firefox-0:140.10.0-1.el9_4
Fixed · RHSA-2026:19464
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:140.10.0-1.el9_4
Fixed · RHSA-2026:19469
Red Hat Enterprise Linux 9.6 Extended Update Support
firefox-0:140.10.0-1.el9_6
Fixed · RHSA-2026:17688
Red Hat Enterprise Linux 9.6 Extended Update Support
thunderbird-0:140.10.0-1.el9_6
Fixed · RHSA-2026:19462
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Affected
Red Hat Enterprise Linux 10
rhel10/thunderbird-flatpak
Affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox-0:140.10.0-1.el10_1 | Fixed | RHSA-2026:10767 |
| Red Hat Enterprise Linux 10 | firefox-0:140.10.0-1.el10_2 | Fixed | RHSA-2026:19041 |
| Red Hat Enterprise Linux 10 | thunderbird-0:140.10.0-1.el10_1 | Fixed | RHSA-2026:12285 |
| Red Hat Enterprise Linux 10 | thunderbird-0:140.10.0-1.el10_2 | Fixed | RHSA-2026:19131 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | firefox-0:140.10.0-1.el10_0 | Fixed | RHSA-2026:17690 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird-0:140.10.0-1.el10_0 | Fixed | RHSA-2026:19463 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | firefox-0:140.10.0-2.el7_9 | Fixed | RHSA-2026:19704 |
| Red Hat Enterprise Linux 8 | firefox-0:140.10.0-1.el8_10 | Fixed | RHSA-2026:10766 |
| Red Hat Enterprise Linux 8 | thunderbird-0:140.10.0-1.el8_10 | Fixed | RHSA-2026:13537 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19655 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19465 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | firefox-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19655 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19465 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | firefox-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:17477 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | thunderbird-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:19467 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | firefox-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:17477 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:19467 |
| Red Hat Enterprise Linux 9 | firefox-0:140.10.0-1.el9_7 | Fixed | RHSA-2026:10757 |
| Red Hat Enterprise Linux 9 | firefox-0:140.10.0-1.el9_8 | Fixed | RHSA-2026:19201 |
| Red Hat Enterprise Linux 9 | thunderbird-0:140.10.0-1.el9_7 | Fixed | RHSA-2026:15892 |
| Red Hat Enterprise Linux 9 | thunderbird-0:140.10.1-1.el9_8 | Fixed | RHSA-2026:19348 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | firefox-0:140.10.0-1.el9_0 | Fixed | RHSA-2026:17687 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el9_0 | Fixed | RHSA-2026:19468 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | firefox-0:140.10.0-1.el9_2 | Fixed | RHSA-2026:17689 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el9_2 | Fixed | RHSA-2026:19461 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | firefox-0:140.10.0-1.el9_4 | Fixed | RHSA-2026:19464 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:140.10.0-1.el9_4 | Fixed | RHSA-2026:19469 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | firefox-0:140.10.0-1.el9_6 | Fixed | RHSA-2026:17688 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | thunderbird-0:140.10.0-1.el9_6 | Fixed | RHSA-2026:19462 |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (41)
- https://access.redhat.com/errata/RHSA-2026:10757
- https://access.redhat.com/errata/RHSA-2026:10766
- https://access.redhat.com/errata/RHSA-2026:10767
- https://access.redhat.com/errata/RHSA-2026:12285
- https://access.redhat.com/errata/RHSA-2026:13537
- https://access.redhat.com/errata/RHSA-2026:15892
- https://access.redhat.com/errata/RHSA-2026:17477
- https://access.redhat.com/errata/RHSA-2026:17687
- https://access.redhat.com/errata/RHSA-2026:17688
- https://access.redhat.com/errata/RHSA-2026:17689
- https://access.redhat.com/errata/RHSA-2026:17690
- https://access.redhat.com/errata/RHSA-2026:19041
- https://access.redhat.com/errata/RHSA-2026:19131
- https://access.redhat.com/errata/RHSA-2026:19201
- https://access.redhat.com/errata/RHSA-2026:19348
- https://access.redhat.com/errata/RHSA-2026:19461
- https://access.redhat.com/errata/RHSA-2026:19462
- https://access.redhat.com/errata/RHSA-2026:19463
- https://access.redhat.com/errata/RHSA-2026:19464
- https://access.redhat.com/errata/RHSA-2026:19465
- https://access.redhat.com/errata/RHSA-2026:19466
- https://access.redhat.com/errata/RHSA-2026:19467
- https://access.redhat.com/errata/RHSA-2026:19468
- https://access.redhat.com/errata/RHSA-2026:19469
- https://access.redhat.com/errata/RHSA-2026:19542
- https://access.redhat.com/errata/RHSA-2026:19655
- https://access.redhat.com/errata/RHSA-2026:19704
- https://access.redhat.com/security/cve/CVE-2026-6752 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=2027499 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2460078 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24093 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-6752
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6752.json
- https://www.cve.org/CVERecord?id=CVE-2026-6752
- https://www.mozilla.org/security/advisories/mfsa2026-30/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-31/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-32/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6752
- https://www.mozilla.org/security/advisories/mfsa2026-33/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-34/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6752
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data