CVE-2026-6764 - Incorrect boundary conditions in the DOM: Device Interfaces component

Back Back to CVE browser

MEDIUM

Incorrect boundary conditions in the DOM: Device Interfaces component

Published Apr 21, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Affected products

Red Hat Enterprise Linux 10

firefox-0:140.10.0-1.el10_1

Fixed · RHSA-2026:10767
Red Hat Enterprise Linux 10

firefox-0:140.10.0-1.el10_2

Fixed · RHSA-2026:19041
Red Hat Enterprise Linux 10

thunderbird-0:140.10.0-1.el10_1

Fixed · RHSA-2026:12285
Red Hat Enterprise Linux 10

thunderbird-0:140.10.0-1.el10_2

Fixed · RHSA-2026:19131
Red Hat Enterprise Linux 10.0 Extended Update Support

firefox-0:140.10.0-1.el10_0

Fixed · RHSA-2026:17690
Red Hat Enterprise Linux 10.0 Extended Update Support

thunderbird-0:140.10.0-1.el10_0

Fixed · RHSA-2026:19463
Red Hat Enterprise Linux 7 Extended Lifecycle Support

firefox-0:140.10.0-2.el7_9

Fixed · RHSA-2026:19704
Red Hat Enterprise Linux 8

firefox-0:140.10.0-1.el8_10

Fixed · RHSA-2026:10766
Red Hat Enterprise Linux 8

thunderbird-0:140.10.0-1.el8_10

Fixed · RHSA-2026:13537
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

firefox-0:140.10.0-1.el8_4

Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

thunderbird-0:140.10.0-1.el8_4

Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

firefox-0:140.10.0-1.el8_4

Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

thunderbird-0:140.10.0-1.el8_4

Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

firefox-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

thunderbird-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

firefox-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

thunderbird-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

firefox-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

thunderbird-0:140.10.0-1.el8_6

Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.8 Telecommunications Update Service

firefox-0:140.10.0-1.el8_8

Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Telecommunications Update Service

thunderbird-0:140.10.0-1.el8_8

Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

firefox-0:140.10.0-1.el8_8

Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

thunderbird-0:140.10.0-1.el8_8

Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 9

firefox-0:140.10.0-1.el9_7

Fixed · RHSA-2026:10757
Red Hat Enterprise Linux 9

firefox-0:140.10.0-1.el9_8

Fixed · RHSA-2026:19201
Red Hat Enterprise Linux 9

thunderbird-0:140.10.0-1.el9_7

Fixed · RHSA-2026:15892
Red Hat Enterprise Linux 9

thunderbird-0:140.10.1-1.el9_8

Fixed · RHSA-2026:19348
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

firefox-0:140.10.0-1.el9_0

Fixed · RHSA-2026:17687
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

thunderbird-0:140.10.0-1.el9_0

Fixed · RHSA-2026:19468
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

firefox-0:140.10.0-1.el9_2

Fixed · RHSA-2026:17689
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

thunderbird-0:140.10.0-1.el9_2

Fixed · RHSA-2026:19461
Red Hat Enterprise Linux 9.4 Extended Update Support

firefox-0:140.10.0-1.el9_4

Fixed · RHSA-2026:19464
Red Hat Enterprise Linux 9.4 Extended Update Support

thunderbird-0:140.10.0-1.el9_4

Fixed · RHSA-2026:19469
Red Hat Enterprise Linux 9.6 Extended Update Support

firefox-0:140.10.0-1.el9_6

Fixed · RHSA-2026:17688
Red Hat Enterprise Linux 9.6 Extended Update Support

thunderbird-0:140.10.0-1.el9_6

Fixed · RHSA-2026:19462
Red Hat Enterprise Linux 10

rhel10/firefox-flatpak

Affected
Red Hat Enterprise Linux 10

rhel10/thunderbird-flatpak

Affected
Red Hat Enterprise Linux 6

firefox

Out of support scope
Red Hat Enterprise Linux 6

thunderbird

Out of support scope
Red Hat Enterprise Linux 7

thunderbird

Out of support scope

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	firefox-0:140.10.0-1.el10_1	Fixed	RHSA-2026:10767
Red Hat Enterprise Linux 10	firefox-0:140.10.0-1.el10_2	Fixed	RHSA-2026:19041
Red Hat Enterprise Linux 10	thunderbird-0:140.10.0-1.el10_1	Fixed	RHSA-2026:12285
Red Hat Enterprise Linux 10	thunderbird-0:140.10.0-1.el10_2	Fixed	RHSA-2026:19131
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox-0:140.10.0-1.el10_0	Fixed	RHSA-2026:17690
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird-0:140.10.0-1.el10_0	Fixed	RHSA-2026:19463
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox-0:140.10.0-2.el7_9	Fixed	RHSA-2026:19704
Red Hat Enterprise Linux 8	firefox-0:140.10.0-1.el8_10	Fixed	RHSA-2026:10766
Red Hat Enterprise Linux 8	thunderbird-0:140.10.0-1.el8_10	Fixed	RHSA-2026:13537
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	firefox-0:140.10.0-1.el8_4	Fixed	RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	thunderbird-0:140.10.0-1.el8_4	Fixed	RHSA-2026:19465
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	firefox-0:140.10.0-1.el8_4	Fixed	RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	thunderbird-0:140.10.0-1.el8_4	Fixed	RHSA-2026:19465
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	firefox-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	thunderbird-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	firefox-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	thunderbird-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	firefox-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	thunderbird-0:140.10.0-1.el8_6	Fixed	RHSA-2026:19466
Red Hat Enterprise Linux 8.8 Telecommunications Update Service	firefox-0:140.10.0-1.el8_8	Fixed	RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Telecommunications Update Service	thunderbird-0:140.10.0-1.el8_8	Fixed	RHSA-2026:19467
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	firefox-0:140.10.0-1.el8_8	Fixed	RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	thunderbird-0:140.10.0-1.el8_8	Fixed	RHSA-2026:19467
Red Hat Enterprise Linux 9	firefox-0:140.10.0-1.el9_7	Fixed	RHSA-2026:10757
Red Hat Enterprise Linux 9	firefox-0:140.10.0-1.el9_8	Fixed	RHSA-2026:19201
Red Hat Enterprise Linux 9	thunderbird-0:140.10.0-1.el9_7	Fixed	RHSA-2026:15892
Red Hat Enterprise Linux 9	thunderbird-0:140.10.1-1.el9_8	Fixed	RHSA-2026:19348
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	firefox-0:140.10.0-1.el9_0	Fixed	RHSA-2026:17687
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	thunderbird-0:140.10.0-1.el9_0	Fixed	RHSA-2026:19468
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	firefox-0:140.10.0-1.el9_2	Fixed	RHSA-2026:17689
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	thunderbird-0:140.10.0-1.el9_2	Fixed	RHSA-2026:19461
Red Hat Enterprise Linux 9.4 Extended Update Support	firefox-0:140.10.0-1.el9_4	Fixed	RHSA-2026:19464
Red Hat Enterprise Linux 9.4 Extended Update Support	thunderbird-0:140.10.0-1.el9_4	Fixed	RHSA-2026:19469
Red Hat Enterprise Linux 9.6 Extended Update Support	firefox-0:140.10.0-1.el9_6	Fixed	RHSA-2026:17688
Red Hat Enterprise Linux 9.6 Extended Update Support	thunderbird-0:140.10.0-1.el9_6	Fixed	RHSA-2026:19462
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected	n/a
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected	n/a
Red Hat Enterprise Linux 6	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 6	thunderbird	Out of support scope	n/a
Red Hat Enterprise Linux 7	thunderbird	Out of support scope	n/a

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-805

References (12)

https://access.redhat.com/security/cve/CVE-2026-6764
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=2022162
Permissions Required
https://bugzilla.redhat.com/show_bug.cgi?id=2460106
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24105
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6764
https://www.cve.org/CVERecord?id=CVE-2026-6764
https://www.mozilla.org/security/advisories/mfsa2026-30/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6764
https://www.mozilla.org/security/advisories/mfsa2026-33/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6764

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-6764		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=2022162		Permissions Required
https://bugzilla.redhat.com/show_bug.cgi?id=2460106		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24105		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6764
https://www.cve.org/CVERecord?id=CVE-2026-6764
https://www.mozilla.org/security/advisories/mfsa2026-30/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6764
https://www.mozilla.org/security/advisories/mfsa2026-33/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6764

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mozilla

Published Apr 21, 2026

Updated May 27, 2026

Reserved Apr 21, 2026

Link CVE-2026-6764

CISA Vulnrichment

Updated May 27, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-6764

Red Hat

Severity Moderate

Public date Apr 21, 2026

Bugzilla 2460106

Link CVE-2026-6764

ENISA EUVD

Assigner mozilla

Published Apr 21, 2026

Updated May 27, 2026

Link EUVD-2026-24105

GitHub

No data