High Threat Security Alert (A26-06-04): Multiple Vulnerabilities in FireFox

Description:

Mozilla has published the advisory (MFSA2026-54) to address multiple vulnerabilities in Firefox. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerabilities.

Reports indicated that proof-of-concept (PoC) exploit code for a denial-of-service vulnerability (CVE-2026-10702) is publicly available and it is at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems or follow the recommendations provided by the product vendors to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Firefox Windows versions prior to version 151.0.3

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution or denial of service on an affected system.

Recommendation:

Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs:
Firefox 151.0.3 (Windows)
https://www.mozilla.org/en-US/firefox/all/#product-desktop-release

Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-54/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10701 (to CVE-2026-10702)
• https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260618