CVE Catalog
CVE-2026-12315
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.28%
20th percentile — higher than 20% of all known CVEs
Summary
A vulnerability involving a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to bypass application security. This could lead to unauthorized access to user data.
Recommendation
It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability.
Original NVD description (English source)
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.