CVE-2026-6773

CVE-2026-6773 is an integer overflow vulnerability in the Graphics: WebGPU component affecting Firefox 150 and Thunderbird 150 prior to their patched versions. This flaw enables remote attackers to trigger a denial-of-service condition without requiring user interaction or special privileges. The vulnerability carries a CVSS 3.1 score of 7.5 (HIGH) due to its network-based attack vector, low complexity, and lack of authentication requirements. While confidentiality and integrity are not compromised, the attack reliably leads to availability loss through service disruption. The FAUCET Risk Score of 47.0 out of 100 indicates moderate overall risk positioning. There is no evidence of active exploitation in the wild, and the vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog or active threat intelligence hot lists. The extremely low EPSS score of 0.0004 suggests minimal probability of exploitation in real-world scenarios. Community attention remains limited, which is consistent with the vulnerability's current inactive status.