CVE-2026-12313

MediumCVSS 4.7

Published: 16/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

CVE-2026-12313 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Risk Assessment

Information disclosure may expose user data and organizational systems. The sandbox escape increases the risk of system takeover.

Recommendation

It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.