CVE-2026-12302
6.5 MEDIUMMitigation bypass in the DOM: Security component
Published: 2026-06-16 · Last updated: 2026-06-16
Severity and scoring
- CVSS
- 6.5 MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CWE
- CWE-693
Description
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-12302
- [Other]https://bugzilla.mozilla.org/show_bug.cgi?id=2034489
- [Other]https://www.mozilla.org/security/advisories/mfsa2026-57/
- [Other]https://www.mozilla.org/security/advisories/mfsa2026-58/
- [Other]https://www.mozilla.org/security/advisories/mfsa2026-59/
- [Other]https://www.mozilla.org/security/advisories/mfsa2026-60/
- [Other]https://www.mozilla.org/security/advisories/mfsa2026-61/
Related CVEs
Same CWE
- CVE-2026-53853 — OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowe... (8.3 HIGH)
- CVE-2026-53845 — OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch path skip before-... (4.3 MEDIUM)
- CVE-2026-12316 — Mitigation bypass in the DOM: Security component (9.1 CRITICAL)
- CVE-2026-12315 — Mitigation bypass in the DOM: Security component (9.1 CRITICAL)
- CVE-2026-12214 — A security flaw has been discovered in Qihoo 360 Total Security 6.0 (7.8 HIGH)