When the AVR exits from an interrupt, it will always return to the main program and execute one more instruction before any pending interrupt is served.
When using the CLI instruction to disable interrupts, the interrupts will be immediately disabled. No interrupt will be executed after the CLI instruction, even if it occurs simultaneously with the CLI instruction.