A critical use-after-free vulnerability in the Widget: Gtk component of Firefox allows sandbox escape. This flaw was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.
A clickjacking vulnerability was identified in the Autofill component of Firefox for Android. This security issue could allow an attacker to trick users into interacting with hidden or disguised UI elements. The vulnerability was addressed and fixed in Firefox version 160.
CVE-2026-124907 is a high-severity vulnerability in Mozilla Firefox's Graphics: CanvasWebGL component involving a use-after-free flaw. This vulnerability could allow an attacker to escalate privileges and escape the browser sandbox. The issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7.
CVE-2026-124908 is a use-after-free vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw was addressed and fixed in Firefox version 160. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impact if exploited.
A use-after-free vulnerability exists in the Graphics: WebRender component of Firefox. This flaw was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-124904 is a use-after-free vulnerability in the SVG component of Firefox. This flaw was addressed and fixed in Firefox version 160. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability losses. No known exploits in the wild have been reported as of the publication date.
Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124903 is a critical use-after-free vulnerability in the IPC component of Firefox that allows sandbox escape. This flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability if exploited.
CVE-2026-124900 is a critical use-after-free vulnerability in the DOM Service Workers component of Firefox that allows sandbox escape. This flaw was fixed in Firefox version 160. The vulnerability has a high CVSS score of 9.6, indicating it can be exploited remotely without privileges and can lead to complete compromise of confidentiality, integrity, and availability.
CVE-2026-124895 is a use-after-free vulnerability in the Storage component of Firefox, specifically affecting localStorage and sessionStorage. This flaw has been assigned a high severity with a CVSS score of 8.8. The vulnerability was fixed in Firefox 160 and Firefox ESR 115.45 and 153.7. Exploitation could lead to high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported.
CVE-2026-124885 is a use-after-free vulnerability in the Graphics: Text component of Firefox. This flaw was addressed and fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impact if exploited.
CVE-2026-124891 is a high severity vulnerability involving incorrect boundary conditions in the DOM Selection component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could potentially lead to significant impact on confidentiality, integrity, and availability as indicated by its CVSS score of 8.8.
CVE-2026-124889 is a use-after-free vulnerability in the CSS Parsing and Computation component of Firefox. This flaw allows for potential memory corruption that could lead to high-impact consequences. The vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. It has a high severity rating with a CVSS score of 8.8. No known exploits in the wild have been reported.
CVE-2026-124897 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impact if exploited. There are no known exploits in the wild at this time.
CVE-2026-124894 is a use-after-free vulnerability in the Networking: Cookies component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant confidentiality, integrity, and availability impacts. No known exploits in the wild have been reported as of the advisory date.