9.1
CVE-2026-12316
- EPSS 0.25%
- Veröffentlicht 16.06.2026 11:52:49
- Zuletzt bearbeitet 16.06.2026 20:16:28
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMozilla
≫
Produkt
Firefox
Version <=
*
Version
152
Status
unaffected
HerstellerMozilla
≫
Produkt
Thunderbird
Version <=
*
Version
152
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.155 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-693 Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
https://www.mozilla.org/security/advisories/mfsa2026-57/
https://bugzilla.mozilla.org/show_bug.cgi?id=2045496
https://www.mozilla.org/security/advisories/mfsa2026-60/