Threats tagged 'ghsa-gffx-q7jv-5m8p'

CVE-2026-124858 is a use-after-free vulnerability in the DOM HTML Parser component of Firefox. This security flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate this issue.