CVE-2026-12301

MediumCVSS 5.3

Published: 16/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile — higher than 16% of all known CVEs

Memory safety bug fixed in Firefox 152. This vulnerability was also fixed in Thunderbird 152.

Exploitation of this vulnerability could lead to unauthorized memory access, posing a risk to user data.

It is recommended to update to the latest version of Firefox and Thunderbird to mitigate this issue.

Original NVD description (English source)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.