CVE-2026-6773 - Denial-of-service due to integer overflow in the Graphics: WebGPU component

HIGH

Denial-of-service due to integer overflow in the Graphics: WebGPU component

Published Apr 21, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.58%

Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Not affected	n/a
Red Hat Enterprise Linux 10	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 6	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 7	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 8	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 9	thunderbird	Not affected	n/a

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (1)

CWE-190

Integer Overflow

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-6773		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=2015959		Permissions Required
https://bugzilla.redhat.com/show_bug.cgi?id=2460093		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2026-6773
https://www.cve.org/CVERecord?id=CVE-2026-6773
https://www.mozilla.org/security/advisories/mfsa2026-30/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-33/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-33/#CVE-2026-6773