CVE-2026-16391 is a vulnerability in Mozilla Firefox
Published on July 21, 2026
Information disclosure in the Storage: IndexedDB component
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
Products Associated with CVE-2026-16391
Want to know whenever a new CVE is published for Mozilla Firefox? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version 140.13, <= 140.* is unaffected.
- Version 153, <= * is unaffected.