CVE-2026-15719

MEDIUM5.4

Site isolation issue in the DOM: Navigation component

Published Jul 14, 2026

Modified 3 days ago

Details

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

References

WEB

https://bugzilla.mozilla.org/show_bug.cgi?id=2043820

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-15719

WEB

https://www.mozilla.org/security/advisories/mfsa2026-67/

WEB

https://www.mozilla.org/security/advisories/mfsa2026-69/

WEB

https://www.mozilla.org/security/advisories/mfsa2026-70/

WEB

https://www.mozilla.org/security/advisories/mfsa2026-72/

CVSS Analysis

CVSS v3.1

5.4

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

NoneA:N

5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Ecosystems

Timeline

PublishedJul 14, 2026

ModifiedJul 22, 2026