CVE-2026-16409
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Jul 21, 2026
CISA due date
—
The record
Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115327 libyang through 6.4.13 contains an uninitialized pointer free vulnerability in… CWE-824
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
- CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
- CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
- CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component. CWE-824
- CVE-2026-47908 Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized… CWE-824
- CVE-2026-47320 Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open… CWE-824