CVE-2026-12294

Опубликовано: 16 июн. 2026

Источник: redhat

CVSS3: 7.5

EPSS Низкий

Описание

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Workers component

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2026:27733	22.06.2026
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2026:30846	29.06.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2026:36100	07.07.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2026:38751	13.07.2026
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2026:38506	13.07.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-266

https://bugzilla.redhat.com/show_bug.cgi?id=2489207firefox: thunderbird: Sandbox escape in the DOM: Workers component

EPSS

Процентиль: 29%

0.00363

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-12294

CVSS3: 9.6

ubuntu

около 1 месяца назад

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12294

CVSS3: 9.6

nvd

около 1 месяца назад

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12294

CVSS3: 9.6

debian

около 1 месяца назад

Sandbox escape in the DOM: Workers component. This vulnerability was f ...

GHSA-j3ch-r4qx-fpvf

CVSS3: 9.6

github

около 1 месяца назад

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.

openSUSE-SU-2026:21043-1

suse-cvrf

около 1 месяца назад

Security update for MozillaFirefox

EPSS

Процентиль: 29%

0.00363

Низкий

7.5 High

CVSS3