CVE-2026-12323

MEDIUM

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

StatusAnalyzed

설명

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Score Summary

CVSS Score: 5.4
Version: 3.1
VPI: 54
Why this VPI (explainable, experimental)
VPI breakdown
Impact 54.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 54.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 6.42%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
Low Confidentiality Impact
No Integrity Impact
Low Availability Impact

Details

CWE Weakness Classification

References (3)

Affected Products (2)

https://www.mozilla.org/security/advisories/mfsa2026-60/

Impact	54.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	54.00