Firefox 156+ Boundary Condition Flaw in Networking Component
CVE-2026-92076 Published on September 15, 2026

Incorrect boundary conditions in the Networking component
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

NVD

Vulnerability Analysis

CVE-2026-92076 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2026-92076 has been classified to as a Buffer Overflow vulnerability or weakness.


Products Associated with CVE-2026-92076

stack.watch emails you whenever new vulnerabilities are published in Mozilla Firefox or Mozilla Thunderbird. Just hit a watch button to start following.

Mozilla Firefox
 
Mozilla Thunderbird
 

Affected Versions

Mozilla Firefox: Mozilla Thunderbird: