CVE•Published 2026-07-21•Modified 2026-07-27•0 articles on news•4 live references•NVD data

CVE-2026-16384Mozilla · Firefox

Vulnerability data via NVD (ingested)

CVSS v3.1

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS percentile

26

Exploit Prediction Scoring System · top 74% of all CVEs

Weaknesses (CWE)

CWE-908Use of Uninitialized Resource

Description

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Timeline

Published 2026-07-21

Modified 2026-07-27

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common). Live host counts are a Premium feature.

Shodan · vuln tag

vuln:CVE-2026-16384

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Mozilla Firefox"

All exposed Mozilla Firefox instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Firefox"

HTTP body or banner mentions "Firefox" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

vuln:CVE-2026-16384

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2026-16384

Censys host search filtered to this CVE id.

CVE-2026-16384

Public source-code mentions — fast PoC discovery.

CVE-2026-16384

GitHub code search for direct mentions.

"CVE-2026-16384" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-163848 repos

vxcontrol/pentagiGo

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

★ 21,244·updated 5d ago

byJoey/Actions-bbr-v3Shell

同步官方内核更新

★ 1,196·updated 5d ago

exploitbench/exploitbenchPython

ExploitBench measures how far AI agents climb, from reaching vulnerable code, to triggering the bug, to building exploit primitives, to arbitrary code execution.

★ 315·updated 3w ago

Rat5ak/CORUNA_TECHNICAL_ANALYSISunknown

A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain

★ 54·updated 4mo ago

Dicklesworthstone/frankenlibcRust

Rust interposition layer for glibc: transparent safety membrane that incrementally replaces C library functions with memory-safe Rust implementations

★ 49·updated 4d ago

KnudsenMorten/SecurityInsightPowerShell

Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier 0–3 criticality, and risk factors. Fix wha…

★ 38·updated 1mo ago

BlackSnufkin/CredsHunterRust

PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping

★ 30·updated 2mo ago

lablup/bsshRust

A high-performance parallel SSH command execution tool for cluster management

★ 27·updated 1w ago

We haven't classified any articles referencing CVE-2026-16384 yet. The external references above still apply.