IndexedDB flaw in Firefox <=150 (ESR 140.10)
CVE-2026-6770 Published on April 21, 2026
Other issue in the Storage: IndexedDB component
Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Vulnerability Analysis
CVE-2026-6770 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity, and a small impact on availability.
Weakness Type
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-6770 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2026-6770
stack.watch emails you whenever new vulnerabilities are published in Mozilla Firefox or Mozilla Thunderbird. Just hit a watch button to start following.
Affected Versions
Mozilla Firefox:- Version 140.10, <= 140.* is unaffected.
- Version 150, <= * is unaffected.
- Version 140.10, <= 140.* is unaffected.
- Version 150, <= * is unaffected.