CVE Catalog
CVE-2026-12302
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.28%
19th percentile — higher than 19% of all known CVEs
Summary
The vulnerability involves a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to bypass application security. This could lead to unauthorized access to user data.
Recommendation
It is recommended to update Firefox and Thunderbird to the latest versions to mitigate this vulnerability.
Original NVD description (English source)
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.