CVE-2026-6762

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published: Apr 21, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-676207.7Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAU CVE-2026-676217.6Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized doc CVE-2026-676229.9Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authentica CVE-2026-676238.8Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a CVE-2026-676246.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-676258.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-676266.5Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.CVE-2026-676284.9Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-676296.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-67636.5Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thun CVE-2026-676306.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-676319.8Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.