Mozilla Products Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities have been identified in Mozilla products, but they are not currently exploited.
- Who is affected
- Deployments of affected Mozilla products are at risk, but no active exploitation is reported.
- Urgency
- Remediation is not urgent as there is no active exploitation of the vulnerabilities.
- Action
- Monitor for updates and apply patches when available.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260715
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-157180.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all scored CVEs.
- Low exploitation riskCVE-2026-157190.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all scored CVEs.
- Low exploitation riskCVE-2026-149060.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-15718 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-15719 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-14906 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Mozilla Firefox and Firefox ESR: Multiple vulnerabilitiescert-bund
- medium[NEW] [medium] Mozilla Firefox: Multiple vulnerabilities allow unspecified attackcert-bund
- unknownMultiple vulnerabilities in Mozilla Thunderbird (July 23, 2026)cert-fr-avis
- unknownMozilla Products Multiple Vulnerabilitieshkcert
- unknownDSA-6394-1 firefox-esr - security updatedebian
- unknownMultiple vulnerabilities in Mozilla products (July 22, 2026)cert-fr-avis
- unknownNCSC-2026-0242 [1.00] [M/H] Vulnerabilities fixed in Mozilla Firefoxncsc-nl
- unknownMultiple Vulnerabilities in Mozilla Firefox (July 15, 2026)cert-fr-avis
- mediumCVE-2026-15719: We are aware that exploit code for this is public however we are not aware of any attacks in t…nvd
- mediumCVE-2026-15718: We are aware that exploit code for this is public however we are not aware of any attacks in t…nvd
- medium[NEW] [medium] Mozilla Firefox: Vulnerability allows file manipulationcert-bund
- mediumCVE-2026-14906: Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files o…nvd
More from HKCERT Security Bulletins
- unknownIBM WebSphere Products Multiple Vulnerabilities2026-07-30
- unknownGoogle Chrome Multiple Vulnerabilities2026-07-30
- unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerability2026-07-30
- unknownNode.js Multiple Vulnerabilities2026-07-30
- unknownXen Multiple Vulnerabilities2026-07-30