CVE-2026-6780

CVE-2026-6780 is a denial-of-service vulnerability in the Audio/Video Playback component affecting Firefox 150 and Thunderbird 150. This flaw enables attackers to disrupt service availability in these applications without requiring user authentication or interaction. The vulnerability has been patched in the aforementioned versions and is not currently listed on the Known Exploited Vulnerabilities catalog, indicating no confirmed active exploitation. The vulnerability carries a CVSS score of 7.5 (HIGH) with a network-based attack vector requiring low complexity and no special privileges. While the attack can be executed remotely without user interaction, the impact is limited to availability disruption, with no confidentiality or integrity compromise. The EPSS score of 0.0004 suggests a relatively low probability of exploitation in the wild compared to other vulnerabilities. There is currently no evidence of active exploitation or publicly available exploit code for this vulnerability. It remains on inactive status with minimal community attention, reflected in its moderate FAUCET Risk Score of 47.0. Organizations using affected Firefox or Thunderbird versions should apply the available patches to eliminate exposure, though the current threat level appears limited.