Threat database

CVE-2026-124931 is a same-origin policy bypass vulnerability in the DOM: Core & HTML component of Mozilla Firefox. This security flaw was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability could allow unauthorized access to web content that should be restricted by the same-origin policy.

Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

CVE-2026-124927 is a site isolation vulnerability in the Graphics: WebRender component of Mozilla Firefox. This security issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could potentially impact the browser's graphics rendering isolation, but no specific exploitation details or active exploits are reported.

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

CVE-2026-124914 is a site isolation issue in the DOM Navigation component of Mozilla Firefox. This vulnerability was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The issue relates to improper site isolation, which can affect the browser's security boundary enforcement.

CVE-2026-124913 is a site isolation vulnerability in the Networking component of Mozilla Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is part of a set of high-impact security issues resolved in the same release. No known exploits in the wild have been reported.

CVE-2026-124912 is a spoofing vulnerability in the DOM security component of Mozilla Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to spoof content within the Document Object Model, potentially misleading users or bypassing security checks.

CVE-2026-124910 is a mitigation bypass vulnerability in the WebExtensions component of Mozilla Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could potentially allow attackers to bypass security mitigations implemented in the WebExtensions framework.

Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

CVE-2026-124905 is a high-impact sandbox escape vulnerability in the DOM Navigation component of Mozilla Firefox. It allows an attacker to escape the browser's sandbox environment, potentially leading to unauthorized code execution or privilege escalation. This vulnerability was fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7.

Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.