CVE-2026-12300

Vulnerability

A memory safety bug was present in Firefox prior to version 152 [1]. The specific component and root cause are not detailed in the available references, but the bug is classified as a general memory safety issue with high impact [1]. Affected versions include all Firefox releases before 152.

Exploitation

The available references do not provide specific exploitation details, such as required attacker network position, authentication, or user interaction. However, memory safety bugs typically require the attacker to craft inputs that trigger unsafe memory operations, possibly through a malicious web page or content. The advisory indicates the bug was reported by a security researcher and fixed in Firefox 152 [1].

Impact

A successful exploit could lead to memory corruption, potentially allowing arbitrary code execution, data disclosure, or application crash. The impact is rated as high by Mozilla [1].

Mitigation

The vulnerability is fixed in Firefox 152, released June 16, 2026 [1]. Users should update to Firefox 152 or later. No workarounds are listed; the only mitigation is to apply the update [1].