Incorrect boundary conditions in the WebRTC: Networking component
Published Apr 21, 2026
7.8
HIGHCVSS 3.1
EPSS 0.16%
Description
Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Affected products
No data.
No data.
Red Hat Enterprise Linux 10
firefox-0:140.10.0-1.el10_1
Fixed · RHSA-2026:10767
Red Hat Enterprise Linux 10
firefox-0:140.10.0-1.el10_2
Fixed · RHSA-2026:19041
Red Hat Enterprise Linux 10
thunderbird-0:140.10.0-1.el10_1
Fixed · RHSA-2026:12285
Red Hat Enterprise Linux 10
thunderbird-0:140.10.0-1.el10_2
Fixed · RHSA-2026:19131
Red Hat Enterprise Linux 10.0 Extended Update Support
firefox-0:140.10.0-1.el10_0
Fixed · RHSA-2026:17690
Red Hat Enterprise Linux 10.0 Extended Update Support
thunderbird-0:140.10.0-1.el10_0
Fixed · RHSA-2026:19463
Red Hat Enterprise Linux 7 Extended Lifecycle Support
firefox-0:140.10.0-2.el7_9
Fixed · RHSA-2026:19704
Red Hat Enterprise Linux 8
firefox-0:140.10.0-1.el8_10
Fixed · RHSA-2026:10766
Red Hat Enterprise Linux 8
thunderbird-0:140.10.0-1.el8_10
Fixed · RHSA-2026:13537
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
firefox-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19655
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
thunderbird-0:140.10.0-1.el8_4
Fixed · RHSA-2026:19465
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
firefox-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19542
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el8_6
Fixed · RHSA-2026:19466
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
firefox-0:140.10.0-1.el8_8
Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
thunderbird-0:140.10.0-1.el8_8
Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
firefox-0:140.10.0-1.el8_8
Fixed · RHSA-2026:17477
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el8_8
Fixed · RHSA-2026:19467
Red Hat Enterprise Linux 9
firefox-0:140.10.0-1.el9_7
Fixed · RHSA-2026:10757
Red Hat Enterprise Linux 9
firefox-0:140.10.0-1.el9_8
Fixed · RHSA-2026:19201
Red Hat Enterprise Linux 9
thunderbird-0:140.10.0-1.el9_7
Fixed · RHSA-2026:15892
Red Hat Enterprise Linux 9
thunderbird-0:140.10.1-1.el9_8
Fixed · RHSA-2026:19348
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
firefox-0:140.10.0-1.el9_0
Fixed · RHSA-2026:17687
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el9_0
Fixed · RHSA-2026:19468
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
firefox-0:140.10.0-1.el9_2
Fixed · RHSA-2026:17689
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
thunderbird-0:140.10.0-1.el9_2
Fixed · RHSA-2026:19461
Red Hat Enterprise Linux 9.4 Extended Update Support
firefox-0:140.10.0-1.el9_4
Fixed · RHSA-2026:19464
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:140.10.0-1.el9_4
Fixed · RHSA-2026:19469
Red Hat Enterprise Linux 9.6 Extended Update Support
firefox-0:140.10.0-1.el9_6
Fixed · RHSA-2026:17688
Red Hat Enterprise Linux 9.6 Extended Update Support
thunderbird-0:140.10.0-1.el9_6
Fixed · RHSA-2026:19462
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Affected
Red Hat Enterprise Linux 10
rhel10/thunderbird-flatpak
Affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox-0:140.10.0-1.el10_1 | Fixed | RHSA-2026:10767 |
| Red Hat Enterprise Linux 10 | firefox-0:140.10.0-1.el10_2 | Fixed | RHSA-2026:19041 |
| Red Hat Enterprise Linux 10 | thunderbird-0:140.10.0-1.el10_1 | Fixed | RHSA-2026:12285 |
| Red Hat Enterprise Linux 10 | thunderbird-0:140.10.0-1.el10_2 | Fixed | RHSA-2026:19131 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | firefox-0:140.10.0-1.el10_0 | Fixed | RHSA-2026:17690 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird-0:140.10.0-1.el10_0 | Fixed | RHSA-2026:19463 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | firefox-0:140.10.0-2.el7_9 | Fixed | RHSA-2026:19704 |
| Red Hat Enterprise Linux 8 | firefox-0:140.10.0-1.el8_10 | Fixed | RHSA-2026:10766 |
| Red Hat Enterprise Linux 8 | thunderbird-0:140.10.0-1.el8_10 | Fixed | RHSA-2026:13537 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19655 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19465 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | firefox-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19655 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird-0:140.10.0-1.el8_4 | Fixed | RHSA-2026:19465 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | firefox-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19542 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el8_6 | Fixed | RHSA-2026:19466 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | firefox-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:17477 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | thunderbird-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:19467 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | firefox-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:17477 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el8_8 | Fixed | RHSA-2026:19467 |
| Red Hat Enterprise Linux 9 | firefox-0:140.10.0-1.el9_7 | Fixed | RHSA-2026:10757 |
| Red Hat Enterprise Linux 9 | firefox-0:140.10.0-1.el9_8 | Fixed | RHSA-2026:19201 |
| Red Hat Enterprise Linux 9 | thunderbird-0:140.10.0-1.el9_7 | Fixed | RHSA-2026:15892 |
| Red Hat Enterprise Linux 9 | thunderbird-0:140.10.1-1.el9_8 | Fixed | RHSA-2026:19348 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | firefox-0:140.10.0-1.el9_0 | Fixed | RHSA-2026:17687 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el9_0 | Fixed | RHSA-2026:19468 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | firefox-0:140.10.0-1.el9_2 | Fixed | RHSA-2026:17689 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | thunderbird-0:140.10.0-1.el9_2 | Fixed | RHSA-2026:19461 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | firefox-0:140.10.0-1.el9_4 | Fixed | RHSA-2026:19464 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:140.10.0-1.el9_4 | Fixed | RHSA-2026:19469 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | firefox-0:140.10.0-1.el9_6 | Fixed | RHSA-2026:17688 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | thunderbird-0:140.10.0-1.el9_6 | Fixed | RHSA-2026:19462 |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (12)
- https://access.redhat.com/security/cve/CVE-2026-6776 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=2021770 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2460110 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24117 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-6776
- https://www.cve.org/CVERecord?id=CVE-2026-6776
- https://www.mozilla.org/security/advisories/mfsa2026-30/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-32/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6776
- https://www.mozilla.org/security/advisories/mfsa2026-33/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-34/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6776
Change history (0)
No recorded changes yet.