CVE-2026-12324

Name: CVE-2026-12324 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-12324

HIGH

CVSS v3.1: 7.3

NetworkNo privilegesNo user interactionVendor advisory ref

Source data as of: 2026-06-17 05:00:11 UTC

At a glance

Severity: HIGH
CVSS: 7.3 v3.1 · NVD
EPSS: EPSS not provided by FIRST.org for this CVE
CISA KEV: No
Attack conditions (CVSS vector): NetworkNo privilegesNo user interaction · Source: NVD Vector
Published: 2026-06-16 · Modified: 2026-06-16
References: Jump to references (5)

CVSS / EPSS / KEV

CVSS v3.1 7.3 / 10 HIGH Source: NVD

EPSS — EPSS not provided by FIRST.org for this CVE Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Record details

CVE ID: CVE-2026-12324
CVSS (v3.1): 7.3 (HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability subscore: 3.9
Impact subscore: 3.4
CISA KEV: No
Weakness (CWE): CWE-703
Affected configurations (CPE): 0
Published: 2026-06-16
Modified: 2026-06-16
Status: Undergoing Analysis

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Reference https://bugzilla.mozilla.org/show_bug.cgi?id=2038444
Vendor advisory https://www.mozilla.org/security/advisories/mfsa2026-57/
Vendor advisory https://www.mozilla.org/security/advisories/mfsa2026-58/
Vendor advisory https://www.mozilla.org/security/advisories/mfsa2026-60/
Vendor advisory https://www.mozilla.org/security/advisories/mfsa2026-61/

← Back to all records