CVE-2026-124932 is a use-after-free vulnerability in the Graphics component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability losses. No known exploits in the wild have been reported for this vulnerability.
CVE-2026-124930 is an information disclosure vulnerability in the Address Bar component of Firefox. This flaw could allow unauthorized information exposure. The issue was resolved in Firefox 160 and Firefox ESR 153.7. The vulnerability has a CVSS score of 4.3, indicating medium severity. No known exploits are reported in the wild.
CVE-2026-124935 is a vulnerability involving undefined behavior in the WebRTC Networking component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is rated with high impact by Mozilla, indicating significant security concerns if exploited.
CVE-2026-124931 is a same-origin policy bypass vulnerability in the DOM Core and HTML components of Firefox. This security flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to bypass browser security restrictions that normally isolate content from different origins.
CVE-2026-124929 is an information disclosure vulnerability in the Layout: Form Controls component of Firefox. This flaw allows unauthorized disclosure of information but does not affect integrity or availability. The issue was resolved in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124934 is a spoofing vulnerability in the Security component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to impersonate or misrepresent identity within the affected component.
CVE-2026-124925 is an information disclosure vulnerability in the Layout component of Firefox. This issue allows unauthorized disclosure of information. The vulnerability was fixed in Firefox version 160. It has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No known exploits in the wild have been reported.
CVE-2026-124922 is a use-after-free vulnerability in the CSS Transitions and Animations component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability compromise. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-124927 is a site isolation vulnerability in the Graphics: WebRender component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is part of a set of high-impact security flaws resolved in the same Firefox release.
CVE-2026-124926 is a high-severity vulnerability involving incorrect boundary conditions in the WebRTC component of Firefox. This flaw could lead to significant impacts on confidentiality, integrity, and availability. The issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7.
CVE-2026-124919 is a high-severity use-after-free vulnerability in the WebRTC networking component of Firefox. It allows for privilege escalation and was fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability has a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability if exploited.
CVE-2026-124924 is a high severity vulnerability involving incorrect boundary conditions in the Graphics: WebRender component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could lead to significant impacts on confidentiality, integrity, and availability as indicated by its CVSS score of 8.8. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2026-124923 is a sandbox escape vulnerability in the Agent component of Firefox. This security flaw allows an attacker to break out of the browser's sandbox environment, potentially leading to unauthorized access or privilege escalation. The vulnerability was addressed and fixed in Firefox version 160.
CVE-2026-124921 is a sandbox escape vulnerability in the Graphics: WebGPU component of Firefox. This security flaw allows an attacker to break out of the browser's sandbox environment, potentially leading to unauthorized access or code execution outside the intended restricted context. The issue was addressed and fixed in Firefox version 160.
CVE-2026-124913 is a site isolation vulnerability in the Networking component of Firefox. This issue was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability is considered high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-124914 is a site isolation vulnerability in the DOM Navigation component of Firefox. This security issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is rated with high impact by Mozilla, indicating a significant security concern. No public exploits or in-the-wild exploitation have been reported. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2026-124918 is a high-severity privilege escalation vulnerability in the Graphics: WebRender component of Firefox. The issue is caused by incorrect boundary conditions, which could allow an attacker to escalate privileges. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124915 is a high severity vulnerability involving incorrect boundary conditions in the Graphics: WebGPU component of Firefox. This flaw could lead to significant impacts on confidentiality, integrity, and availability. The issue was addressed and fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124920 is a vulnerability involving uninitialized memory in the Graphics: WebGPU component of Firefox. This security flaw was addressed and fixed in Firefox version 160. The vulnerability is classified with high impact according to the Mozilla advisory.