Threat database

Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12321 is a low-impact vulnerability involving JIT miscompilation in the JavaScript WebAssembly component of Mozilla Firefox. This issue was fixed in Firefox version 152. The vulnerability is part of a broader set of security fixes released in Firefox 152 and Thunderbird 152 addressing multiple memory safety bugs, sandbox escapes, and other issues. The CVSS score for this specific vulnerability is 5.4 (medium severity), but the vendor rates its impact as low. No known exploits are reported in the wild. Users running Firefox versions prior to 152 are affected.

CVE-2026-12320 is an information disclosure vulnerability in the Password Manager component of Mozilla Firefox. It affects Firefox versions prior to 152 and was fixed in Firefox 152. The vulnerability has a CVSS score of 4.3 (medium severity) and allows unauthorized disclosure of information without impacting integrity or availability. Mozilla has released an official security advisory confirming the fix in Firefox 152.

CVE-2026-12319 is a denial-of-service vulnerability in the Audio/Video playback component of Mozilla Firefox. This vulnerability affects Firefox versions prior to 152 and was fixed in Firefox 152. The issue can cause application disruption but does not impact confidentiality or integrity. The vulnerability is part of a broader set of security fixes released in Firefox 152 addressing multiple memory safety, sandbox escape, and other security issues. No known exploits are reported in the wild for this specific vulnerability.

CVE-2026-12318 is a vulnerability in the Libraries component of NSS used by Mozilla Firefox. It involves incorrect boundary conditions that could lead to security issues. This vulnerability was fixed in Firefox version 152. The CVSS score is 7.3, indicating a high severity impact with potential confidentiality, integrity, and availability impacts. Mozilla has released an official security advisory confirming the fix in Firefox 152. No known exploits are reported in the wild for this specific vulnerability.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12316 is a mitigation bypass vulnerability in the DOM security component of Mozilla Firefox. This vulnerability, along with numerous other critical and moderate security issues including memory safety bugs, sandbox escapes, and use-after-free flaws, were fixed in Firefox version 152. The vulnerability affects Firefox versions prior to 152. The CVSS score is 9.1, indicating critical severity with high impact on confidentiality and integrity. No known exploits in the wild have been reported. The vendor advisory confirms that the issue is fixed in Firefox 152.

CVE-2026-12315 is a mitigation bypass vulnerability in the DOM security component of Mozilla Firefox. It was fixed in Firefox 152 and Firefox ESR 140.12. The vulnerability has a critical CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring user interaction or privileges. The vendor advisory confirms the fix availability in these versions.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12313 is a medium severity vulnerability in Mozilla Firefox affecting the Security: Process Sandboxing component. It allows information disclosure and sandbox escape. The issue was fixed in Firefox 152 and Firefox ESR 140.12. No known exploits are reported in the wild. The vulnerability is part of a broader set of security fixes released in these versions.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12311 is a medium severity vulnerability in Mozilla Firefox involving information disclosure and sandbox escape within the Security: Process Sandboxing component. This vulnerability allows an attacker to bypass sandbox restrictions and potentially access sensitive information. It was fixed in Firefox 152 and Firefox ESR 140.12, as well as Thunderbird 152 and Thunderbird 140.12. The vulnerability has a CVSS score of 4.7 and was publicly disclosed on June 16, 2026. No known exploits in the wild have been reported. The vendor advisories confirm the availability of official fixes in the specified versions.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12304 is a same-origin policy bypass vulnerability in the Networking: Cookies component of Mozilla Firefox and Thunderbird. This vulnerability allows bypassing the same-origin policy, which is a fundamental security mechanism in web browsers. The issue was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. The vulnerability has a critical CVSS score of 9.1. Mozilla has published official security advisories confirming the fix and providing detailed information about this and other related vulnerabilities.

CVE-2026-12303 is an information disclosure vulnerability in Mozilla Firefox's Graphics: WebGPU component caused by incorrect boundary conditions. This flaw was fixed in Firefox version 152. The vulnerability has a moderate impact and a CVSS score of 4.3. It is part of a broader set of security fixes released in Firefox 152 and Thunderbird 152 addressing multiple memory safety, sandbox escape, and other issues. No known exploits are reported in the wild for this specific vulnerability.