SEC.co
Emergency

By weakness (CWE)

CWE-688: related vulnerabilities

CVEs classified under CWE-688. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-12311MEDIUM 4.7

    CVE-2026-12311 is a sandbox escape vulnerability in Firefox and Thunderbird that can leak information to an attacker. The flaw exists in the process sandboxing security component and requires user interaction—such as clicking a link or visiting a malicious webpage—to trigger. While the vulnerability is rated as medium severity, it undermines a critical security boundary, allowing an attacker to read sensitive information that should be isolated within the sandbox. This affects current-generation Firefox and Thunderbird releases.