Security Vulnerability Report
中文
CVE-2026-6763 CVSS 6.5 MEDIUM

CVE-2026-6763

Published: 2026-04-21 13:16:22
Last Modified: 2026-04-22 17:38:01

Description

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS Details

CVSS Score
6.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* - VULNERABLE
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* - VULNERABLE
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:* - VULNERABLE
Firefox < 150
Firefox ESR < 140.10
Thunderbird < 150
Thunderbird < 140.10

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!-- Proof of Concept for CVE-2026-6763 --> <!-- This HTML file attempts to trigger the mitigation bypass in the file handling component. --> <!DOCTYPE html> <html> <head> <title>CVE-2026-6763 PoC</title> </head> <body> <script> // Attempt to trigger the vulnerability via a specific file handling sequence function triggerBypass() { try { // Create a blob representing a file that triggers the handling logic var maliciousContent = "Test payload for mitigation bypass"; var blob = new Blob([maliciousContent], {type: "application/vnd.mozilla.test"}); var url = URL.createObjectURL(blob); // Simulate the condition that bypasses the mitigation // In a real scenario, this would interact with the specific vulnerable component var iframe = document.createElement('iframe'); iframe.src = url; document.body.appendChild(iframe); console.log("[+] PoC executed: Check if security mitigations were bypassed."); } catch (e) { console.log("[-] PoC execution failed: " + e.message); } } // Auto-execute on load window.onload = triggerBypass; </script> </body> </html>

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-6763", "sourceIdentifier": "[email protected]", "published": "2026-04-21T13:16:22.227", "lastModified": "2026-04-22T17:38:00.877", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 2.5}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-693"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", "versionEndExcluding": "140.10.0", "matchCriteriaId": "15AF037C-5C86-48EB-B1DE-3AC100A34596"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "versionEndExcluding": "150.0", "matchCriteriaId": "67B01D49-66FA-4C76-9EB4-2B8CD61FBEB2"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*", "versionStartIncluding": "140.0", "versionEndExcluding": "140.10.0", "matchCriteriaId": "6A8A3284-C06C-4591-9548-5324BD91C4FC"}]}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2021666", "source": "[email protected]", "tags": ["Permissions Required"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-32/", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-34/", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}