CVE-2026-12297
Sandbox escape due to incorrect boundary conditions in the Networking component
CVSS Score
9.6
EPSS Score
0.4%
EPSS Percentile
31th
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
| Vendor | mozilla |
| Product | firefox |
| Ecosystems | |
| Industries | Technology |
| Published | Jun 16, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for mozilla firefox
Be the first to know when new critical vulnerabilities affecting mozilla firefox are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Mozilla / Firefox
All versions affected Mozilla / Thunderbird
All versions affected References
bugzilla.mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=2041610 mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-57/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-58/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-59/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-60/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-61/ access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-12297 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2489235 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12297.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38506 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36100 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38751 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27733 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:30846 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27717 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33445 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36102 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39428 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37210 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39141 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36103 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39142 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36101 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39706 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39011 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38753 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:37391 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38750 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27734 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29940
Credits
zx