9.8
Critical
CVE-2026-92036 Incorrect boundary conditions in the Networking: HTTP component
Description
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 156 | earliest → < 156 | 156 |
| Thunderbird 156 | earliest → < 156 | 156 |