PT-2026-49665

CVE-2026-12296

·

Published

2026-06-16

·

Updated

2026-08-03

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12
Description A sandbox escape exists within the Security: Process Sandboxing component. A sandbox is a security mechanism for separating running programs, usually in an effort to mitigate the impact of a vulnerability by restricting the program's access to the rest of the system.
Recommendations Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Thunderbird to version 152. Update Thunderbird to version 140.12.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:27717
ALSA-2026:27733
ALSA-2026:27734
ALSA-2026:29940
ALSA-2026:30846
ALSA-2026:33445
OESA-2026-2735
OESA-2026-2736
OESA-2026-2737
OESA-2026-2756
OPENSUSE-SU-2026:11052-1
OPENSUSE-SU-2026:11055-1
OPENSUSE-SU-2026:11072-1
OPENSUSE-SU-2026:21043-1
OPENSUSE-SU-2026:21168-1
OPENSUSE-SU-2026:21519-1
RHSA-2026:33445
SUSE-SU-2026:22351-1
SUSE-SU-2026:23115-1
SUSE-SU-2026:23137-1
SUSE-SU-2026:2582-1
SUSE-SU-2026:2583-1
SUSE-SU-2026:2814-1
SUSE-SU-2026:2852-1
Found an issue in the description? Have something to add? Feel free to write us 👾