CVE-2026-12306

MediumCVSS 5.3

Published: 16/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile — higher than 17% of all known CVEs

Summary

A memory safety bug was fixed in Firefox 152 and Thunderbird 152. This vulnerability was also patched in the ESR versions of Firefox and Thunderbird.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized memory access, posing a risk to user data. Organizations should update their software to avoid potential attacks.

Recommendation

It is recommended to update to the latest versions of Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12 to protect against this vulnerability.

Original NVD description (English source)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.