CVE-2026-15718

Description

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.

References

https://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.html

https://www.mozilla.org/security/advisories/mfsa2026-72/

https://www.mozilla.org/security/advisories/mfsa2026-70/

https://www.mozilla.org/security/advisories/mfsa2026-67/

https://bugzilla.mozilla.org/show_bug.cgi?id=2045443

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability Being Monitored