CVE-2026-12317

LLM-synthesized narrative grounded in this CVE's description and references.

• Mozilla Corporation/Firefoxinferred2 versions

  (expand)+ 1 more

  • (no CPE)
  • (no CPE)range: <152
• Mozilla Corporation/Thunderbirdllm-fuzzy

  Range: <152
• osv-coords4 versions

  pkg:apk/chainguard/firefoxpkg:apk/chainguard/firefox-esrpkg:apk/wolfi/firefoxpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed

  < 152-r0+ 3 more

  • (no CPE)range: < 152-r0
  • (no CPE)range: < 0
  • (no CPE)range: < 152-r0
  • (no CPE)range: < 152.0-1.1

• bugzilla.mozilla.org/show_bug.cginvd
• www.mozilla.org/security/advisories/mfsa2026-57/nvd
• www.mozilla.org/security/advisories/mfsa2026-60/nvd

• Mozilla Patches 25 CVEs in Firefox and Thunderbird, Including Two Critical DOM Security Bypasses
  Vypr Intelligence · Jun 16, 2026
• Thunderbird: 25 CVEs Disclosed in Single Advisory, Two Critical DOM Bypasses
  Vypr Intelligence · Jun 16, 2026