Search: CVE-2026-12311

CVE-2026-12311 is a medium severity vulnerability in Mozilla Firefox involving information disclosure and sandbox escape within the Security: Process Sandboxing component. This vulnerability allows an attacker to bypass sandbox restrictions and potentially access sensitive information. It was fixed in Firefox 152 and Firefox ESR 140.12, as well as Thunderbird 152 and Thunderbird 140.12. The vulnerability has a CVSS score of 4.7 and was publicly disclosed on June 16, 2026. No known exploits in the wild have been reported. The vendor advisories confirm the availability of official fixes in the specified versions.