Vulnerability of the Widget component: Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure.

🗓️ 10 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attac...

Reporter	Title	Published	Views	Family All 170
AlpineLinux	CVE-2026-12322	16 Jun 202611:52	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Firefox	6 Aug 202610:25	–	astralinux
Chainguard	CVE-2026-12322 vulnerabilities	18 Jun 202620:21	–	cgr
Circl	CVE-2026-12322	16 Jun 202614:01	–	circl
CVE	CVE-2026-12322	16 Jun 202611:52	–	cve
Cvelist	CVE-2026-12322 Clickjacking issue in the Widget: Gtk component	16 Jun 202611:52	–	cvelist
Debian CVE	CVE-2026-12322	16 Jun 202611:52	–	debiancve
EUVD	EUVD-2026-37068	16 Jun 202611:52	–	euvd
Tenable Nessus	Fedora 43 : firefox / nss (2026-1c873954fa)	20 Jun 202600:00	–	nessus
Tenable Nessus	Fedora 43 : thunderbird (2026-2fb5ca48a2)	1 Jul 202600:00	–	nessus

Vulners

Node

mozilla firefoxRange<152.0.0

mozilla thunderbirdRange<152.0.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12322
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-12322
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2026-57/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2026-60/
mozilla	www.mozilla.org/security/advisories/mfsa2026-57/
mozilla	www.mozilla.org/security/advisories/mfsa2026-60/
wiki	www.wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0805SE18HF
ubuntu	www.ubuntu.com/security/CVE-2026-12322
web	www.web.nvd.nist.gov/view/vuln/detail
mozilla	www.mozilla.org/security/advisories/mfsa2026-57.html

10 Aug 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 35.4

CVSS 26.4

EPSS0.00207