QwikSec

Security Database

CVE

CWE

Training

CVE-2026-7320

Published: Apr 28, 2026

Modified: Apr 30, 2026

PUBLISHED

Description

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Vendor	Product	Versions
Mozilla	Firefox	unaffected `115.35.1 - <= 115.` unaffected `140.10.1 - <= 140.` unaffected `150.0.1 - <= *`
Mozilla	Thunderbird	unaffected `140.10.1 - <= 140.` unaffected `150.0.1 - <= `

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2027433

https://www.mozilla.org/security/advisories/mfsa2026-35/

https://www.mozilla.org/security/advisories/mfsa2026-36/

https://www.mozilla.org/security/advisories/mfsa2026-37/

https://www.mozilla.org/security/advisories/mfsa2026-38/

https://www.mozilla.org/security/advisories/mfsa2026-39/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.