VDB
CVE-2026-12325
CVE-2026-12325
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.
EPSS 0.23% · 13.1th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.23%
13.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Mozilla Thunderbird <152 | |
| SUSE | SUSE openSUSE | |
| Mozilla | Mozilla Firefox ESR <115.37 | |
| Mozilla | Mozilla Thunderbird <140.12 | |
| RESF | RESF Rocky Linux | |
| Debian | Debian Linux | |
| Mozilla | Mozilla Firefox <152 | |
| Ubuntu | Ubuntu Linux | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Amazon | Amazon Linux 2 | |
| Oracle | Oracle Linux | |
| SUSE | SUSE Linux | |
| IGEL | IGEL OS | |
| Mozilla | Mozilla Firefox ESR <140.12 | |
| Red Hat | Red Hat Enterprise Linux |
Timeline
- Jun 16, 2026 CVE Published
- Jun 16, 2026 CVE Updated
- Jun 17, 2026 EPSS Score
- Jun 17, 2026 Coalition ESS Score
- Jun 19, 2026 Security Advisory
- Jun 22, 2026 Distribution Patch
- Jun 22, 2026 Security Advisory
- Jun 22, 2026 Distribution Patch
- Jun 22, 2026 Security Advisory
- Jun 25, 2026 Distribution Patch
- Jun 25, 2026 Distribution Patch
- Jun 25, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1959.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1959 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-59/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-60/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/ advisory
- https://security-tracker.debian.org/tracker/DSA-6350-1 advisory
- https://lists.debian.org/debian-lts-announce/2026/06/msg00025.html advisory
- https://security-tracker.debian.org/tracker/DSA-6351-1 advisory
- https://lists.debian.org/debian-lts-announce/2026/06/msg00024.html advisory
- https://access.redhat.com/errata/RHSA-2026:27734 advisory
- https://access.redhat.com/errata/RHSA-2026:27733 advisory
- https://access.redhat.com/errata/RHSA-2026:27717 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GOWGTLFEAFM6JGKSBFCMH52SSW6LKRJO/ advisory
- https://linux.oracle.com/errata/ELSA-2026-27717.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026963.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026964.html advisory
- https://errata.build.resf.org/RLSA-2026:27717 advisory
- https://errata.build.resf.org/RLSA-2026:27733 advisory
…and 34 more