Use-After-Free Vulnerability in SVG Component of Mozilla Firefox
CVE-2026-124904

Currently unrated

Key Information:

Vendor

Mozilla
Status
Firefox
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124904?

A use-after-free vulnerability exists in the SVG (Scalable Vector Graphics) component of Mozilla Firefox, which can lead to potential memory corruption issues. This vulnerability allows attackers to exploit the memory management bug, impacting the application's stability and potentially executing arbitrary code. The issue has been addressed in Firefox version 160 and users are encouraged to update to ensure their systems are protected against such exploits.

Affected Version(s)

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2086062
https://www.mozilla.org/security/advisories/mfsa2026-125/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OpenAI Codex Security (kylebot)
.