← All advisories

Medium severity5.3NVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026

CVE-2026-12301

CVE-2026-12301

Description

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Mozilla Corporation/Firefoxinferred2 versions
<152+ 1 more
- (no CPE)range: <152
- (no CPE)range: <152
Mozilla Corporation/Thunderbirdllm-fuzzy
Range: <152
osv-coords4 versions
pkg:apk/chainguard/firefox pkg:apk/chainguard/firefox-esr pkg:apk/wolfi/firefox pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 152-r0+ 3 more
- (no CPE)range: < 152-r0
- (no CPE)range: < 0
- (no CPE)range: < 152-r0
- (no CPE)range: < 152.0-1.1

Patches

Vulnerability mechanics

References

3

News mentions

1

Mozilla Patches 11 CVEs in Firefox and Thunderbird, Including Critical DOM Bypass
Vypr Intelligence · Jun 16, 2026