Use-After-Free Vulnerability in Firefox by Mozilla
CVE-2026-124878

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124878?

A Use-After-Free vulnerability exists in the Layout: Positioned component of Firefox. This flaw could potentially allow an attacker to execute unintended actions within the browser, leading to a range of negative consequences for users. The issue was addressed in Firefox version 160, where robust security measures were implemented to mitigate the risk and enhance overall application stability. It is crucial for users to keep their browsers updated to ensure protection against such vulnerabilities.

Affected Version(s)

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OpenAI Codex Security (kylebot)
.