Use-After-Free Vulnerability in Firefox by Mozilla
CVE-2026-124908

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124908?

A use-after-free vulnerability was identified within the CSS Parsing and Computation component of Firefox, impacting earlier versions. This flaw could lead to unpredictable application behavior, including potential code execution. Mozilla has addressed this vulnerability in Firefox version 160, urging users to upgrade to safeguard against potential exploits.

Affected Version(s)

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2088651

https://www.mozilla.org/security/advisories/mfsa2026-125/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

Mozilla

CVE-2026-124908 Data

JSON