CVE-2026-12313
MediumCVSS 4.7Summary
CVE-2026-12313 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
Information disclosure may expose user data and organizational systems. The sandbox escape increases the risk of system takeover.
Recommendation
It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.
Other vulnerabilities in Security: Process Sandboxing
See all- CVE-2026-12311Medium
CVE-2026-12311 is an information disclosure and sandbox escape vulnerability in the Security: Process Sandboxing component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- CVE-2026-8958High
CVE-2026-8958 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Original NVD description (English source)
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.