Ghostwire
Home / Vulnerabilities / CVE-2026-12304

CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR...

CRITICAL CVSS 0.0

Published: June 16, 2026 | Last Modified: June 16, 2026

Description

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References