High Threat Security Alert (A26-07-22): Multiple Vulnerabilities in FireFox

Description:

Mozilla has published the advisory (MFSA2026-67) to address multiple vulnerabilities in Firefox. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerabilities.

Reports indicated that proof-of-concept (PoC) exploit code for a denial-of-service vulnerability (CVE-2026-15718) and a security restriction bypass vulnerability (CVE-2026-15719) is publicly available and it is at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems or follow the recommendations provided by the product vendors to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Firefox Windows versions prior to version 152.0.6

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service or security restriction bypass on an affected system.

Recommendation:

Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs:
Firefox 152.0.6 (Windows)
https://www.mozilla.org/en-US/firefox/all/#product-desktop-release

Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/
• https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260715
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15718 (to CVE-2026-15719)