Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-21 | 1 | General1 |
| 2026-05-18 | 1 | Disclosure1 |
| 2026-06-28 | 1 | Patch1 |
CVE-2026-6766: Mozilla NSS. tls13_AEAD() did `inLen - tagLen` before checking length. A 5-byte QUIC record underflowed to a ~4GB offset -> wild-pointer SEGV. Moderate in Firefox. ASAN first. Report second. Fixed in Firefox 150.
Post summary
A new Mozilla NSS TLS 1.3 underflow causes a wild‑pointer segmentation fault; the issue is moderately severe, was reported via ASAN, and has been fixed in Firefox 150.
For instance, two CVEs passed every gate: CVE-2026-34875 — Mbed TLS, CVSS 9.8 Missing buffer check in psa_export_public_key() FFDH path. Stack overflow. CVE-2026-6766 — Mozilla NSS, CVSS 7.5 Unsigned underflow in tls13_AEAD → wild-pointer SEGV in QUIC. Paid by Mozilla.
Post summary
The post announces two new CVEs with detailed technical shortcomings but does not mention PoC, exploits, active attacks, patches, or debunking.
CVE-2026-6766 Incorrect Boundary Conditions in NSS Libraries Component F... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6766 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post merely references the CVE with a generic link, lacking any detailed information or actionable insights.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |