CVE-2026-16374

Analyzed Analyzed - Analysis Complete

Information Disclosure in Firefox DevTools

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Mozilla Corporation

Description

Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-10

AI Q&A

2026-07-21

EPSS Evaluated

2026-08-09

NVD

CVE-2026-16374

EUVD

EUVD-2026-46210

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	to 153.0.0 (exc)
mozilla	firefox	to 140.13.0 (exc)
mozilla	thunderbird	to 140.13.0 (exc)
mozilla	thunderbird	From 141.0 (inc) to 153.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure issue in the Framework component of DevTools. It was patched in Firefox version 153 and Firefox ESR version 140.13.

Detection Guidance

Detection requires checking Firefox or Firefox ESR versions. Compare installed versions against Firefox 153 and Firefox ESR 140.13. Use commands like 'firefox --version' or 'apt show firefox-esr' to verify.

Impact Analysis

An attacker could exploit this to gain access to sensitive information through the DevTools Framework component. Users running unpatched versions of Firefox or Firefox ESR are at risk.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. Without additional context on the nature of the information disclosure or affected data types, no direct assessment can be made.

Mitigation Strategies

Update Firefox to version 153 or later and Firefox ESR to version 140.13 or later to address the information disclosure vulnerability in the Framework component.

Hi! I’m here to help you understand CVE-2026-16374. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70