Threat database

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

CVE-2026-124879 is a vulnerability involving an invalid pointer in the Networking: Cache component of Mozilla Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is rated with high impact by Mozilla. There are no known exploits in the wild, and no affected versions are explicitly listed beyond the fixed versions. The issue is part of a broader set of security fixes released simultaneously by Mozilla.

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

CVE-2026-124874 is a vulnerability in Mozilla Firefox's Networking: HTTP component that allows bypassing the same-origin policy. This security flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability is rated with high impact by Mozilla. No public exploits or in-the-wild exploitation have been reported as of the advisory date.

CVE-2026-124873 is a high-impact vulnerability involving an invalid pointer in the DOM Editor component of Mozilla Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The issue could potentially lead to memory corruption or other severe consequences if exploited. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate this vulnerability.

Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.