Service Workers Sandbox Escape Vulnerability in Firefox by Mozilla
CVE-2026-124900
Currently unrated
What is CVE-2026-124900?
A vulnerability has been identified in the Firefox browser involving a sandbox escape via a use-after-free issue in the Service Workers component. This flaw allows attackers to potentially execute arbitrary code by manipulating how the browser handles memory in the context of service workers. The issue was addressed in Firefox version 160, where the appropriate fixes have been implemented to mitigate this security concern.
Affected Version(s)
Firefox 160