CVE-2026-12318Patch(mozilla / firefox)

LOWCVSS 7.3 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox
  • thunderbird

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
firefoxthunderbird

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-16: 3Patch / Workaround · 2026-06-16: 2Technical Details · 2026-06-16: 306-16
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-12318 Incorrect Boundary Conditions in NSS Libraries Component Fixed in... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12318 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post reports that CVE‑2026‑12318, a boundary‑condition flaw in NSS libraries, has been fixed, but it provides no proof‑of‑concept, exploit, or detailed patch information.

    0001038
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-12318 Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. https://www.cve.org/CVERecord?id=CVE-2026-12318 ----- Traducción: CVE-2026-12318 Condiciones de contorno incorrectas en el … http://infoflow.cloud`

    Post summary

    The tweet reports CVE-2026-12318, noting it’s a boundary condition flaw fixed in Firefox 152 and Thunderbird 152, with no exploit or active use mentioned.

    0000026
    82 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-12318 Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. https://www.cve.org/CVERecord?id=CVE-2026-12318

    Post summary

    The notice reports the CVE as fixed in Firefox 152 and Thunderbird 152 without evidence of active exploitation or PoC.

    00000290
    57.6K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillathunderbird---

Explore more