CVE-2026-6782

HIGH

Information disclosure in the IP Protection component

Title source: cna
STIX 2.1

Description

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

References (3)

Scores

CVSS v3 7.5
EPSS 0.0004
EPSS Percentile 12.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (4)
mozilla/firefox < 150.0
Mozilla/Firefox 150
mozilla/thunderbird < 150.0
Mozilla/Thunderbird 150
Published Apr 21, 2026
Tracked Since Apr 21, 2026