Mozilla patches critical Firefox and Tor Browser flaw as Apple caps macOS bug reports

A high‑severity vulnerability (CVE‑2026‑10702) affecting the SpiderMonkey JavaScript engine was fixed by Mozilla in Firefox 151.0.3 on 2 June 2026 and by the Tor Project in Tor Browser 15.0.19 on 20 July 2026. The flaw allowed remote code execution through a malicious web page without user interaction, potentially compromising user anonymity in Tor.

Apple announced it will limit the number of active security reports each researcher can submit for macOS after more than 50 potential flaws were identified in three weeks, including a privilege‑escalation issue. The move follows the rapid discovery of vulnerabilities aided by artificial‑intelligence tools, which have increased both the volume of reports and the difficulty of verifying them. Italian cybersecurity startup Bynario reported being blocked from submitting further findings.

Both companies urge users to update their software promptly: Firefox users should upgrade to version 151.0.3 or later, Tor Browser users to 15.0.19 or later, and macOS users should apply the latest Apple updates while the bug‑reporting limits are in place.