Skip to content
feed: live
>_ 0dayNews
Vendor

Mozilla

Vulnerabilities across Mozilla Firefox, Thunderbird, and the shared Gecko/SpiderMonkey stack — the Mozilla Foundation Security Advisories (MFSA) cadence, browser-sandbox escapes, and the JavaScript-engine bugs that Pwn2Own and in-the-wild attackers keep finding.

CVEs
CVE-2026-15718
[ MEDIUM ] CVSS 4.3 patched

Firefox JavaScript/WebAssembly invalid pointer with public exploit code

An invalid-pointer flaw in Firefox's JavaScript / WebAssembly component. Mozilla notes exploit code is public but no in-the-wild attacks are confirmed. Fixed in Firefox 152.0.6.

Mozilla / Firefox (pre-152.0.6)
CVE-2026-15719
[ MEDIUM ] CVSS 5.4 patched

Firefox DOM Navigation site-isolation flaw with public exploit code

A site-isolation flaw in Firefox's DOM Navigation component. Mozilla notes exploit code is public but no in-the-wild attacks are confirmed. Fixed in Firefox 152.0.6.

Mozilla / Firefox (pre-152.0.6)
Articles
~/articles/2026-07-15-mozilla-firefox-exploit-public-chrome-adobe-coldfusion-patch-day
Firefox exploit code public; Chrome, Adobe patch same day
mozilla

Firefox exploit code public; Chrome, Adobe patch same day

Mozilla says exploit code is public for two Firefox flaws fixed in 152.0.6. Chrome shipped Ozone use-after-free fixes; Adobe pushed 8 ColdFusion criticals.

read →