CVE-2026-12322General(mozilla / firefox)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

mozilla CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://bugzilla.mozilla.org/show_bug.cgi?id=2033848

Weakness type (CWE)

CWE-1021

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

firefox
thunderbird

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-06-16); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

mozilla

Products

firefoxthunderbird

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

General

250.0%

Patch

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-16	3	General1Patch2
2026-06-22	1	General1

Full discourse4 posts

Sawah Cyber Security@SawahCyber133d
General
Tim Sawah Cyber Security menemukan sebuah Clickjacking vulnerability pada Mozilla Firefox (CVE-2026-12322). Kerentanan seperti ini dapat dimanfaatkan untuk memicu tindakan yang tidak disadari oleh pengguna ketika berinteraksi dengan sebuah halaman web.
Post summary
The post announces the discovery of a clickjacking vulnerability (CVE-2026-12322) in Firefox that can cause unintended user actions. No proof‑of‑concept, exploit details, patch information, or active exploitation evidence is provided.
1000049
13 followersView on X
Infoflowcloud@infoflowcloud138d
Patch
🚨*CVE* CVE-2026-12322 Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. https://www.cve.org/CVERecord?id=CVE-2026-12322 ----- Traducción: CVE-2026-12322 Problema de clickjacking en el Widget: componente Gtk. Est… http://infoflow.cloud`
Post summary
The text discloses a clickjacking vulnerability in a Gtk widget and notes that it is fixed in Firefox 152 and Thunderbird 152, indicating the availability of a patch.
0000024
82 followersView on X
CVE@CVEnew138d
Patch
CVE-2026-12322 Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. https://www.cve.org/CVERecord?id=CVE-2026-12322
Post summary
CVE-2026-12322 is a clickjacking vulnerability in the Widget: Gtk component, which has already been patched in Firefox 152 and Thunderbird 152.
00000190
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds138d
General
CVE-2026-12322 Clickjacking Vulnerability in Widget https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12322 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces a clickjacking vulnerability (CVE‑2026‑12322) and links to a detail page, but provides no PoC, exploit code, active exploitation evidence, or patch information.
0000028
4.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mozilla	firefox	-	-	-
App	mozilla	thunderbird	-	-	-

Explore more

Back to dashboard mozilla CVEs firefox vulnerabilities

What researchers are saying

CVE-2026-12322

Sawah Cyber Security@SawahCyberGeneral

The post announces the discovery of a clickjacking vulnerability (CVE-2026-12322) in Firefox that can cause unintended user actions. No proof‑of‑concept, exploit details, patch information, or active exploitation evidence is provided.

Infoflowcloud@infoflowcloudPatch

The text discloses a clickjacking vulnerability in a Gtk widget and notes that it is fixed in Firefox 152 and Thunderbird 152, indicating the availability of a patch.

CVE@CVEnewPatch

CVE-2026-12322 is a clickjacking vulnerability in the Widget: Gtk component, which has already been patched in Firefox 152 and Thunderbird 152.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The tweet announces a clickjacking vulnerability (CVE‑2026‑12322) and links to a detail page, but provides no PoC, exploit code, active exploitation evidence, or patch information.