{"vulnerability": "cve-2026-16412", "sightings": [{"uuid": "6ce14319-60ec-47b1-ae3b-83921172f125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16412", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr5w5liffy2z", "content": "Firefox ESR 140.12 & 152 face CRITICAL memory safety vulnerabilities \u2014 arbitrary code execution possible. Update to 153/ESR 140.13 now. Exploit code is public, but no active attacks yet. https://radar.offseq.com/threat/cve-2026-16412-vulnerability-in-mozilla-firefox-4b126d3842b74077 #OffSeq #Fire...", "creation_timestamp": "2026-07-21T13:30:36.171676Z"}, {"uuid": "86e3e8b4-89b1-42bf-ae84-797c25943b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5yycp7sd2q", "content": "CVE-2026-16412 - Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153\nCVE ID : CVE-2026-16412\n \n Published : July 21, 2026, 1:17 p.m. | 27\u00a0minutes ago\n \n Description : Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidenc...", "creation_timestamp": "2026-07-21T14:21:19.691138Z"}, {"uuid": "fd7a60cf-04cb-40f8-bed8-154bbed2f6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6pewugmt2q", "content": "CVE-2026-16412 - firefox\nA bug in Firefox's memory handling could allow hackers to run unauthorized code on your system. This issue affects Firefox versions 152 and 140.12. To fix the issue, update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-07-21T21:02:05.855843Z"}, {"uuid": "80e962fb-df5a-4df4-a183-054b53f60337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260722", "content": "", "creation_timestamp": "2026-07-22T04:48:01.744472Z"}, {"uuid": "cadea660-9da1-4fc5-9690-7e6ef302e903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcorte72g", "content": "Daily IT Security Digest \u2014 2026-07-22\nreleased patches for Firefox ESR 140.13 and Firefox 153 addressing CVE-2026-16412, a critical memory safety vulnerability affecting both ESR and standard releases. The flaw allows remote attackers to execute arbitrary code, escape the browser sandbox, and", "creation_timestamp": "2026-07-22T05:04:01.336560Z"}, {"uuid": "e92f4e15-7e24-4d15-a86a-a58eff7dbb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcp2dp423", "content": "Daily IT Security Digest \u2014 2026-07-22\nsensitive information via crafted web content. Public exploits already exist for CVE-2026-16412, though no in-the-wild attacks have been confirmed yet. All Firefox and Firefox ESR users should upgrade immediately.\nSources:", "creation_timestamp": "2026-07-22T05:04:01.806983Z"}, {"uuid": "a4af99f3-157f-4db1-bb75-437a7b3f371f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16412", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7ztuad2f2r", "content": "CVE-2026-16412 - firefox-esr\nApache HTTP Server on Debian Linux systems has a vulnerability that could allow an attacker to access sensitive information, potentially compromising user data. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefoxesr #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-22T09:42:03.653312Z"}]}