CVE-2026-12319

LLM-synthesized narrative grounded in this CVE's description and references.

• Mozilla Corporation/Firefox2 versions

  cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*+ 1 more

  • cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*range: <152.0.0
  • (no CPE)range: <152
• Mozilla Corporation/Thunderbird2 versions

  cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*+ 1 more

  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*range: <152.0.0
  • (no CPE)range: <152
• osv-coords4 versions

  pkg:apk/chainguard/firefoxpkg:apk/chainguard/firefox-esrpkg:apk/wolfi/firefoxpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed

  < 152.0.1-r0+ 3 more

  • (no CPE)range: < 152.0.1-r0
  • (no CPE)range: < 0
  • (no CPE)range: < 152.0.1-r0
  • (no CPE)range: < 152.0-1.1

• www.mozilla.org/security/advisories/mfsa2026-57/nvdVendor Advisory
• www.mozilla.org/security/advisories/mfsa2026-60/nvdVendor Advisory
• bugzilla.mozilla.org/show_bug.cginvdPermissions Required

• Mozilla Patches 25 CVEs in Firefox and Thunderbird, Including Two Critical DOM Security Bypasses
  Vypr Intelligence · Jun 16, 2026
• Thunderbird: 25 CVEs Disclosed in Single Advisory, Two Critical DOM Bypasses
  Vypr Intelligence · Jun 16, 2026