CVE-2026-12314

HighCVSS 7.5

Published: 16/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile — higher than 16% of all known CVEs

A memory safety bug was fixed in Firefox 152. This vulnerability also affects Firefox ESR 140.12 and Thunderbird 152 and 140.12.

The memory safety bug may lead to unauthorized memory access, posing risks to user data and system integrity.

It is recommended to update to the latest version of Firefox or Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.