CVE-2026-12322: Clickjacking issue in the Widget: Gtk component
Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152 - Upgrade
Upgrade
Mozilla Firefoxto a version that resolves this vulnerability.Fixed in 152 - Upgrade
Upgrade
Mozilla Thunderbirdto a version that resolves this vulnerability.Fixed in 152
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-12289
- CVE-2026-12290
- CVE-2026-12291
- CVE-2026-12292
- CVE-2026-12293
- CVE-2026-12294
- CVE-2026-12295
- CVE-2026-12296
- CVE-2026-12297
- CVE-2026-12298
- CVE-2026-12299
- CVE-2026-12300
- CVE-2026-12301
- CVE-2026-12302
- CVE-2026-12303
- CVE-2026-12304
- CVE-2026-12305
- CVE-2026-12306
- CVE-2026-12307
- CVE-2026-12308
- CVE-2026-12309
- CVE-2026-12310
- CVE-2026-12311
- CVE-2026-12312
- CVE-2026-12313
- CVE-2026-12314
- CVE-2026-12315
- CVE-2026-12316
- CVE-2026-12317
- CVE-2026-12318
- CVE-2026-12319
- CVE-2026-12320
- CVE-2026-12321
- CVE-2026-12322
- CVE-2026-12323
- CVE-2026-12324
- CVE-2026-12325
- CVE-2026-12326
- CVE-2026-12327
- CVE-2026-12328
Frequently Asked Questions
What is the severity of CVE-2026-12322?
CVE-2026-12322 has a medium severity rating of 5.4 according to the CVSS 3.1 metrics.
How do I fix CVE-2026-12322?
To fix CVE-2026-12322, update your Mozilla Firefox or Mozilla Thunderbird to version 152 or higher.
What components are affected by CVE-2026-12322?
CVE-2026-12322 specifically affects the Widget: Gtk component in Mozilla Firefox and Mozilla Thunderbird.
Is CVE-2026-12322 considered a serious threat?
While CVE-2026-12322 is rated medium severity, users should still apply the necessary updates to mitigate any risk.
When was CVE-2026-12322 published?
CVE-2026-12322 was published on June 16, 2026.