CVE-2026-12329

MEDIUM

Memory safety bug fixed in Thunderbird ESR 140.12

Title source: cna
STIX 2.1

Description

Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.

References (22)

Core 22
Core References

Scores

CVSS v3 5.3
EPSS 0.0033
EPSS Percentile 24.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-119 CWE-416 CWE-476
Status published
Products (4)
mozilla/firefox 140.0 - 140.12.0
Mozilla/Firefox 140.12
mozilla/thunderbird 140.0 - 140.12.0
Mozilla/Thunderbird 140.12
Published Jun 16, 2026
Tracked Since Jun 16, 2026