CVE-2026-12299 | Mozilla Firefox up to 151 HTML Remote Code Execution

A vulnerability identified as critical has been detected in Mozilla Firefox up to 151. The affected element is an unknown function of the component HTML Handler. Performing a manipulation results in Remote Code Execution.

This vulnerability is cataloged as CVE-2026-12299. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.