CVE-2026-12311
MediumCVSS 4.7Summary
CVE-2026-12311 is an information disclosure and sandbox escape vulnerability in the Security: Process Sandboxing component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
Information disclosure may lead to unauthorized access to user data, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.
Other vulnerabilities in Security: Process Sandboxing
See all- CVE-2026-12313Medium
CVE-2026-12313 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- CVE-2026-8958High
CVE-2026-8958 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Original NVD description (English source)
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.