CVE-2026-12330
MEDIUM
5,4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none
Description
AI Translation Available
Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12.
119
Improper Restriction of Operations within the Bounds of a Memory Buffer
StableCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Memory
Read Memory
Dos: Crash, Exit, Or Restart
Dos: Resource Consumption (Cpu)
Dos: Resource Consumption (Memory)
Applicable Platforms
Languages:
Memory-Unsafe, C, C++, Assembly
Application
Firefox by Mozilla
Version Range Affected
To
115.37.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Thunderbird by Mozilla
Version Range Affected
From
140.0
(inclusive)
To
140.12.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Firefox by Mozilla
Version Range Affected
From
140.0
(inclusive)
To
140.12.0
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://bugzilla.mozilla.org/show_bug.cgi?id=2029326
https://www.mozilla.org/security/advisories/mfsa2026-58/
https://www.mozilla.org/security/advisories/mfsa2026-59/
https://www.mozilla.org/security/advisories/mfsa2026-61/