CVE-2026-12316
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Mitigation bypass in the DOM security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability, potentially leading to unauthorized access to data.
Recommendation
It is recommended to update to the latest version of Firefox and Thunderbird to mitigate this vulnerability.
Other vulnerabilities in DOM security component
See all- CVE-2026-12315Critical
A vulnerability involving a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- CVE-2026-12302Medium
The vulnerability involves a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Original NVD description (English source)
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS