CVE-2026-12295

Fix

Public exploits 1

• SneakyNachos/CVE-2026-12295-UXXS-in-my-wasm PoC on GitHub

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 5

• https://www.mozilla.org/security/advisories/mfsa2026-57/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-58/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-59/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-60/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2026-61/ Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.