Back to overview

CVE-2026-12296

Description
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Metadata

CVE ID
CVE-2026-12296
State
PUBLISHED
Assigner
mozilla
Reserved
2026-06-15 15:08 UTC
Published
2026-06-16 11:52 UTC
Last updated
2026-06-16 16:08 UTC
Vendor / Product
Mozilla / Firefox
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Mozilla Firefox — 140.12 ≤ 140.*, 152 ≤ *
Mozilla Thunderbird — 140.12 ≤ 140.*, 152 ≤ *
References (5)
Back to overview