Mozilla fixed two critical vulnerabilities in Firefox and states openly that, for both, exploit code is already public. They are CVE-2026-15718 and CVE-2026-15719, patched in Firefox 152.0.6.
No real-world attacks have been seen yet — but once exploitation instructions circulate publicly, the gap to the first campaigns is measured in days. The same day, Google fixed 15 issues in Chrome, two of them critical (version 150.0.7871.124).
- Firefox: Menu → Help → About Firefox; it should read 152.0.6.
- Chrome: Menu → Help → About Google Chrome; it should read 150.0.7871.124 or newer.
- Restart the browser — the update only applies after a restart.
Sources
This article was generated with AI assistance.