CVE-2026-12329

—

CVSS 3.1

5.3 medium

EPSS

<1%p24

Published

Jun 16, 2026 (Jun 16, 2026)

Modified

Jul 15, 2026

Description

Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.

Vendors: mozilla
Products: firefox, thunderbird
Weakness: CWE-119, CWE-416, CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.