CVE-2026-6780
Denial-of-service in the Audio/Video: Playback component
High · published April 21, 2026
What it is
Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00517 · 43.1th percentile
- Published
- 2026-04-21T12:41Z
EPSS history
Timeline