PT-2026-49667 · Mozilla · Firefox

Haruka Yamazaki · Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-12298

NVD

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Firefox ESR 140.12.

Fix

Memory Corruption

Out of bounds Read

Use After Free

Weakness Enumeration

CWE-787

CWE-125

CWE-416

Related Identifiers

CVE-2026-12298

Affected Products

Firefox

References · 4

• https://mozilla.org/security/advisories/mfsa2026-57 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-12298 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-58 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=2041981 · Note