Threats tagged 'ghsa-9w8p-9j9w-g76w'

CVE-2026-124857 is a use-after-free vulnerability in the Graphics: Canvas2D component of Firefox. This flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impacts on confidentiality, integrity, and availability if exploited. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.