Incorrect boundary conditions in the Libraries component in NSS

An attacker could exploit this boundary condition vulnerability to trigger a denial-of-service (DoS) attack. This means they could crash or hang applications utilizing the affected NSS libraries, effectively disrupting service. The impact is primarily related to availability; however, a prolonged DoS could indirectly lead to data loss or other security compromises if critical services become unavailable. While the specific attack vector isn't detailed, the nature of boundary condition vulnerabilities often involves carefully crafted inputs designed to trigger unexpected behavior and resource exhaustion within the library.

1. आरक्षित2026-04-21
2. प्रकाशित2026-04-21
3. EPSS अद्यतन2026-04-29

The primary mitigation for CVE-2026-6772 is to upgrade to a patched version of NSS. Specifically, upgrade Firefox to version 150, Firefox ESR to version 115.35 or 140.10, or Thunderbird to version 150 or 140.10. If immediate upgrading is not feasible, consider implementing temporary workarounds such as input validation on data processed by NSS libraries. While a WAF or proxy cannot directly mitigate this vulnerability, they can help protect against malicious inputs that could trigger the flaw. After upgrading, confirm the fix by attempting to reproduce the vulnerability with known attack vectors (if available) or by monitoring system stability for any unexpected behavior.