Use-After-Free Vulnerability in Firefox's Editor Component
CVE-2026-124867

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124867?

A use-after-free vulnerability exists in the Editor component of the Firefox browser, where memory that is still in use can be compromised and exploited by an attacker. This can potentially lead to arbitrary code execution. It is critical for users to update to Firefox version 160 to mitigate any risks associated with this vulnerability.

Affected Version(s)

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2079050

https://www.mozilla.org/security/advisories/mfsa2026-125/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

Mozilla

CVE-2026-124867 Data

JSON