CVE-2026-124939 is a vulnerability involving just-in-time (JIT) miscompilation in the JavaScript engine's JIT component. This flaw was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability is classified with high impact by Mozilla, indicating serious security concerns if left unpatched.
CVE-2026-124944 is an information disclosure vulnerability in the Marionette component of Firefox. This vulnerability allows unauthorized disclosure of information. It was fixed in Firefox version 160. The CVSS v3.1 base score is 4.3, indicating a medium severity impact with network attack vector, low attack complexity, no privileges required, and user interaction required.
CVE-2026-124940 is a mitigation bypass vulnerability in the File Handling component of Firefox. This security flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow attackers to bypass security mitigations related to file handling, potentially leading to security risks. No active exploitation in the wild has been reported. The vendor has released an official fix.
CVE-2026-124941 is an information disclosure vulnerability in the RLBox security component of Firefox. This flaw could allow an attacker to gain access to sensitive information. The vulnerability was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The CVSS score is 4.3, indicating a medium severity level.
CVE-2026-124933 is a sandbox escape vulnerability in the Console component of Firefox. This security flaw allows code running within the sandbox to break out of its restricted environment. The issue was addressed and fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124938 is a mitigation bypass vulnerability in the Add-ons Manager component of Firefox. This security flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could potentially allow attackers to bypass security mitigations related to add-ons management.
CVE-2026-124937 is a security vulnerability in the Media component of Firefox for Android. It was addressed and fixed in Firefox version 160. The vulnerability is part of a broader set of high-impact security issues resolved in this release.
CVE-2026-124928 is a mitigation bypass vulnerability in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 160. The vulnerability is considered high impact according to the Mozilla advisory.
CVE-2026-124936 is a spoofing vulnerability in the Address Bar component of Firefox. This security flaw could allow an attacker to deceive users by presenting misleading information in the browser's address bar. The issue was addressed and fixed in Firefox version 160.
CVE-2026-124932 is a use-after-free vulnerability in the Graphics component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability losses. No known exploits in the wild have been reported for this vulnerability.
CVE-2026-124930 is an information disclosure vulnerability in the Address Bar component of Firefox. This flaw could allow unauthorized information exposure. The issue was resolved in Firefox 160 and Firefox ESR 153.7. The vulnerability has a CVSS score of 4.3, indicating medium severity. No known exploits are reported in the wild.
CVE-2026-124935 is a vulnerability involving undefined behavior in the WebRTC Networking component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is rated with high impact by Mozilla, indicating significant security concerns if exploited.
CVE-2026-124931 is a same-origin policy bypass vulnerability in the DOM Core and HTML components of Firefox. This security flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to bypass browser security restrictions that normally isolate content from different origins.
CVE-2026-124929 is an information disclosure vulnerability in the Layout: Form Controls component of Firefox. This flaw allows unauthorized disclosure of information but does not affect integrity or availability. The issue was resolved in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124934 is a spoofing vulnerability in the Security component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to impersonate or misrepresent identity within the affected component.
CVE-2026-124925 is an information disclosure vulnerability in the Layout component of Firefox. This issue allows unauthorized disclosure of information. The vulnerability was fixed in Firefox version 160. It has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No known exploits in the wild have been reported.
CVE-2026-124922 is a use-after-free vulnerability in the CSS Transitions and Animations component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability compromise. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-124927 is a site isolation vulnerability in the Graphics: WebRender component of Firefox. This issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability is part of a set of high-impact security flaws resolved in the same Firefox release.
CVE-2026-124926 is a high-severity vulnerability involving incorrect boundary conditions in the WebRTC component of Firefox. This flaw could lead to significant impacts on confidentiality, integrity, and availability. The issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7.
CVE-2026-124919 is a high-severity use-after-free vulnerability in the WebRTC networking component of Firefox. It allows for privilege escalation and was fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability has a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability if exploited.