CVE-2026-12292

HighCVSS 8.1

Published: 16/06/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A vulnerability in the Web Audio component of Firefox and Thunderbird is caused by incorrect boundary conditions. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely or cause a denial of service, compromising system confidentiality and availability.

Recommendation

Immediately update Firefox to version 152 or later, and Thunderbird to version 152 or 140.12, depending on the branch used.

Original NVD description (English source)

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.