CVE-2026-6765

Fix

Public exploits 1

• defineid/SkeletonKey PoC on GitHub

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 4

• https://www.mozilla.org/security/advisories/mfsa2026-30/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-32/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-33/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-34/ Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.