CVE-2026-124895 is a use-after-free vulnerability in the Storage component of Firefox, specifically affecting localStorage and sessionStorage. This flaw has been assigned a high severity with a CVSS score of 8.8. The vulnerability was fixed in Firefox 160 and Firefox ESR 115.45 and 153.7. Exploitation could lead to high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported.