Memory Safety Vulnerability in Firefox by Mozilla
CVE-2026-12307

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 16 June 2026

What is CVE-2026-12307?

This vulnerability pertains to a memory safety issue that could potentially allow attackers to execute arbitrary code or crash the application. This risk was addressed in Firefox version 152 and Firefox ESR version 140.12, wherein critical updates were deployed to enhance browser security. Users are advised to ensure their software is updated to safeguard against potential exploits.

Affected Version(s)

Firefox 140.12

Firefox 152

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2038133

https://www.mozilla.org/security/advisories/mfsa2026-57/

https://www.mozilla.org/security/advisories/mfsa2026-58/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 16, 2026
Vulnerability Reserved
Jun 15, 2026

Credit

Atsushi Sada

CVE-2026-12307 Data

JSON