Threats tagged 'ghsa-4vqj-rh9m-xjjp'

CVE-2026-124862 is a use-after-free vulnerability in the DOM Core and HTML components of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.