CVE-2026-12297 is a vulnerability in Mozilla Firefox
Published on June 16, 2026
Sandbox escape due to incorrect boundary conditions in the Networking component
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.
Products Associated with CVE-2026-12297
Want to know whenever a new CVE is published for Mozilla Firefox? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version 115.37, <= 115.* is unaffected.
- Version 140.12, <= 140.* is unaffected.
- Version 152, <= * is unaffected.