Memory Safety Bug in Firefox by Mozilla
CVE-2026-12317

7.5HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
16 June 2026

What is CVE-2026-12317?

A memory safety issue has been identified in Firefox version 152, which has been addressed through a security update. This vulnerability could potentially allow attackers to exploit memory corruption, leading to unauthorized access or data breaches. Users are strongly advised to update their browsers to the latest version to mitigate these risks. For detailed information, visit the official Mozilla security advisories.

Affected Version(s)

Firefox 152

Thunderbird 152

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2007083
https://www.mozilla.org/security/advisories/mfsa2026-57/
https://www.mozilla.org/security/advisories/mfsa2026-60/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Frédéric Wang Nélar
.