CVEvulnerability

CVE-2026-15719

5.4 MEDIUM Published 2026-07-14 Modified 2026-07-22 Official page ↗

Status: Modified
Published: 2026-07-14
Last modified: 2026-07-22
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Description

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

Affected configurations

• mozilla firefox (< 152.0.6)

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2043820 Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-67/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-69/ www.mozilla.org
https://www.mozilla.org/security/advisories/mfsa2026-70/ www.mozilla.org
https://www.mozilla.org/security/advisories/mfsa2026-72/ www.mozilla.org