Dashboard / CVE-2026-12328

CVE-2026-12328

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-06-16 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Weakness Classification (2)

Affected Software (5)

VendorProductVersion
mozilla firefox < 115.37.0
mozilla firefox < 152.0
mozilla firefox 140.0 – 140.12.0
mozilla thunderbird < 152.0.0
mozilla thunderbird 140.0 – 140.12.0

References & Advisories (30)

Showing 25 of 30 references

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.48%
Raw Score 0.004760
Percentile 41.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00476
2026-10-28
0.00476

Intelligence Sources

nvd ref →

External Links