CVE-2026-12316

CRITICAL

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

StatusAnalyzed

설명

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Score Summary

CVSS Score: 9.1
Version: 3.1
VPI: 91
Why this VPI (explainable, experimental)
VPI breakdown
Impact 91.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 91.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 15.7%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
No Availability Impact

Details

CWE Weakness Classification

References (3)

Affected Products (2)

https://www.mozilla.org/security/advisories/mfsa2026-60/

Impact	91.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	91.00