Mozilla Firefox Denial of Service Vulnerability

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-09-09

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/mozilla-firefox-denial-of-service-vulnerability_20260909

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-868530.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• low[NEU] [niedrig] Mozilla Firefox für iOS: Schwachstelle ermöglicht Denial of Servicecert-bund
• unknownVulnérabilité dans Mozilla Firefox (09 septembre 2026)cert-fr-avis
• mediumCVE-2026-86853: A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or e…nvd

Recent advisories for Mozilla Firefox Denial

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• low[NEU] [niedrig] Mozilla Firefox für iOS: Schwachstelle ermöglicht Denial of Servicecert-bund · 2026-09-09
• criticalexploitedCVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerabilitycisa-kev · 2022-03-28

More from HKCERT Security Bulletins

• unknownPalo Alto Products Multiple Vulnerabilities2026-09-10
• unknownMongoDB Multiple Vulnerabilities2026-09-10
• unknownGoogle Chrome Multiple Vulnerabilities2026-09-10
• unknownCitrix Products Multiple Vulnerabilities2026-09-10
• unknownAdobe Monthly Security Update (September 2026)2026-09-09