CVE-2026-16376

Analyzed Analyzed - Analysis Complete

Graphics: WebGPU Denial-of-Service in Firefox

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Mozilla Corporation

Description

Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-10

AI Q&A

2026-07-21

EPSS Evaluated

2026-08-09

NVD

CVE-2026-16376

EUVD

EUVD-2026-46212

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	thunderbird	to 153.0 (exc)
mozilla	firefox	to 153.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a denial-of-service vulnerability in the Graphics: WebGPU component of Firefox. It was fixed in Firefox version 153. The issue allows an attacker to crash the browser by exploiting a flaw in the WebGPU implementation.

Detection Guidance

This vulnerability is specific to Firefox versions before 153. To detect it, check your Firefox version using about:support in the browser or run 'firefox --version' in the terminal. If the version is below 153, the system is vulnerable.

Impact Analysis

If you use Firefox versions before 153, an attacker could exploit this flaw to cause your browser to crash repeatedly, disrupting your ability to use web applications that rely on WebGPU.

Compliance Impact

This vulnerability is a denial-of-service issue in Firefox's Graphics: WebGPU component. It does not directly affect compliance with GDPR or HIPAA as it does not involve data breaches or unauthorized access. However, if the DoS disrupts critical services, it could indirectly impact availability requirements under these regulations.

Mitigation Strategies

Update Firefox to version 153 or later to address the Denial-of-service vulnerability in the Graphics: WebGPU component.

Hi! I’m here to help you understand CVE-2026-16376. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70