PT-2026-49671

CVE-2026-12302

·

Published

2026-06-16

·

Updated

2026-10-22

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12
Description A mitigation bypass exists within the DOM security component. The Document Object Model (DOM) is a programming interface for web documents that represents the page so that programs can change the document structure, style, and content.
Recommendations Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Firefox ESR to version 115.37. Update Thunderbird to version 152. Update Thunderbird to version 140.12.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:27717
ALSA-2026:27733
ALSA-2026:27734
ALSA-2026:29940
ALSA-2026:30846
ALSA-2026:33445
CLSA-2026-1785560172
OESA-2026-2735
OESA-2026-2736
OESA-2026-2737
OESA-2026-2756
OPENSUSE-SU-2026:11052-1
OPENSUSE-SU-2026:11055-1
OPENSUSE-SU-2026:11072-1
OPENSUSE-SU-2026:21043-1
OPENSUSE-SU-2026:21168-1
OPENSUSE-SU-2026:21519-1
RHSA-2026:33445
SUSE-SU-2026:22351-1
SUSE-SU-2026:23115-1
SUSE-SU-2026:23137-1
SUSE-SU-2026:2582-1
SUSE-SU-2026:2583-1
SUSE-SU-2026:2814-1
SUSE-SU-2026:2852-1
Found an issue in the description? Have something to add? Feel free to write us 👾