Description
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-12295 ↗
- bugzilla.mozilla.org/show_bug.cgi ↗
- www.mozilla.org/security/advisories/mfsa2026-57/ ↗
- www.mozilla.org/security/advisories/mfsa2026-58/ ↗
- www.mozilla.org/security/advisories/mfsa2026-59/ ↗
- www.mozilla.org/security/advisories/mfsa2026-60/ ↗
- www.mozilla.org/security/advisories/mfsa2026-61/ ↗
- access.redhat.com/errata/RHSA-2026:27717 ↗
- access.redhat.com/errata/RHSA-2026:27733 ↗
- access.redhat.com/errata/RHSA-2026:27734 ↗
- access.redhat.com/errata/RHSA-2026:29940 ↗
- access.redhat.com/errata/RHSA-2026:30846 ↗
- access.redhat.com/errata/RHSA-2026:33445 ↗
- access.redhat.com/errata/RHSA-2026:36100 ↗
- access.redhat.com/errata/RHSA-2026:36101 ↗
- access.redhat.com/errata/RHSA-2026:36102 ↗
- access.redhat.com/errata/RHSA-2026:36103 ↗
- access.redhat.com/errata/RHSA-2026:37210 ↗
- access.redhat.com/errata/RHSA-2026:37391 ↗
- access.redhat.com/errata/RHSA-2026:38506 ↗
- access.redhat.com/errata/RHSA-2026:38750 ↗
- access.redhat.com/errata/RHSA-2026:38751 ↗
- access.redhat.com/errata/RHSA-2026:38753 ↗
- access.redhat.com/errata/RHSA-2026:39011 ↗
- access.redhat.com/errata/RHSA-2026:39141 ↗
- access.redhat.com/errata/RHSA-2026:39142 ↗
- access.redhat.com/errata/RHSA-2026:39428 ↗
- access.redhat.com/errata/RHSA-2026:39706 ↗
- access.redhat.com/security/cve/CVE-2026-12295 ↗
- bugzilla.redhat.com/show_bug.cgi ↗
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12295.json ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.