Vulnpedia
← All CVEs

CVE-2026-15718

MEDIUM 4.3 ALL-YEARS

Published 2026-07-14 · Last modified 2026-07-22 · mozilla · NVD: Modified

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.3%chance of exploitation in 30 days · 25th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

4.3CVSS 3.1 · MEDIUM · ADP

  • ConfidentialityLow
  • IntegrityNone
  • AvailabilityNone

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: A user must take an action (click / open a file)
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Mozilla

Products Firefox Thunderbird

Weakness (CWE)

  • CWE-763: Release of Invalid Pointer or Reference

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

References and research data (JSON)

Vendor product assessments

Showing 32 of 268 vendor product statements; 236 omitted. Read the full vendor advisory.

  • firefox-0:140.13.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_9?arch=ppc64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-0:140.13.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=src

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-0:140.13.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debugsource-0:140.13.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debugsource-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debuginfo-0:140.13.0-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debuginfo-0:140.13.0-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-0:140.13.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4?arch=src

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debugsource-0:140.13.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debugsource-0:140.13.0-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debugsource-0:140.13.0-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debugsource-0:140.13.0-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debuginfo-0:140.13.0-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-0:140.13.0-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debugsource-0:140.13.0-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debugsource-0:140.13.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-0:140.13.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-0:140.13.0-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=src

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-x11-0:140.13.0-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debuginfo-0:140.13.0-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox-debuginfo-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird-debugsource-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • rhel10/firefox-flatpak as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:oci/firefox-flatpak?repository_url=registry.redhat.io/rhel10/firefox-flatpak

    • none available: Affected
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • rhel10/thunderbird-flatpak as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:oci/thunderbird-flatpak?repository_url=registry.redhat.io/rhel10/thunderbird-flatpak

    • none available: Affected
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/firefox

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • firefox.src as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/firefox?arch=src

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/thunderbird

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird.src as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/thunderbird?arch=src

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/thunderbird

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00
  • thunderbird.src as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/thunderbird?arch=src

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-15718 · Updated 2026-08-12T15:49:26+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

1 candidate

Known Affected Software Configurations

VendorProductVersion range
MozillaFirefox< 152.0.6

All CVSS metrics

  • MEDIUM 4.3 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
  • MEDIUM 4.3 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS