Threats Tagged 'cve-2026-12323'

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 10 updates. These include sandbox escapes, information disclosure, memory safety bugs, mitigation bypasses, privilege escalation, denial-of-service, and boundary condition errors across various components such as DOM, Security Process Sandboxing, Graphics, Networking, and Internationalization. The update fixes these issues in Firefox ESR 140.12, Firefox 152, Thunderbird ESR 140.12, and Thunderbird 152. The vulnerabilities have a high security impact and affect Red Hat Enterprise Linux 10 versions with firefox-0:140.12.0-1.el10_2.x86_64. Users are advised to apply the security update provided by Red Hat to remediate these issues.

CVE-2026-12323 is a spoofing vulnerability in the DOM: Core & HTML component of Mozilla Firefox. This issue was addressed and fixed in Firefox version 152. The vulnerability has a medium severity with a CVSS score of 5.4. It does not have known exploits in the wild. The fix is included in the Firefox 152 release, which also addresses multiple other security vulnerabilities across various components. Users running versions prior to 152 are affected.