CVE-2026-12316

CriticalCVSS 9.1

Published: 16/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile — higher than 19% of all known CVEs

Mitigation bypass in the DOM security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Organizations may be exposed to attacks that exploit this vulnerability, potentially leading to unauthorized access to data.

It is recommended to update to the latest version of Firefox and Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.