Information Disclosure Vulnerability in Firefox Browser and ESR Version
CVE-2026-124909

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124909?

An information disclosure vulnerability exists in the Private Browsing component of Firefox. This vulnerability allows unauthorized access to certain data, potentially exposing sensitive information to attackers. Mozilla has addressed this issue in the updates for Firefox 160 and Firefox ESR 153.7. Users are encouraged to update their browsers to mitigate risks.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.