CVE-2026-12313
EUVD-2026-3710416.06.2026, 13:16
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 152.0 |
| mozilla | firefox_esr | 140.0 ≤ 𝑥 < 140.12.0 |
| mozilla | thunderbird | 𝑥 < 152.0.0 |
| mozilla | thunderbird_esr | 140.0 ≤ 𝑥 < 140.12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||
| firefox-esr |
| ||||||||||||||||
| thunderbird |
|
Common Weakness Enumeration