CVE-2026-12308

MediumCVSS 5.3

Published: 16/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile — higher than 17% of all known CVEs

Memory safety bug fixed in Firefox 152. This vulnerability was also fixed in Firefox ESR 140.12 and Thunderbird 152 and 140.12.

Exploitation of this vulnerability could lead to unauthorized memory access, posing a risk to user data.

It is recommended to update to the latest version of Firefox or Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.