Mitigation Bypass in Firefox WebExtensions Component
CVE-2026-124910

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124910?

A mitigation bypass vulnerability has been identified in the WebExtensions component of Firefox. This flaw allows certain security restrictions to be circumvented, potentially exposing users to security risks. Users are encouraged to update to Firefox version 160 or Firefox ESR version 153.7 to protect against this vulnerability. For full details and guidance on this issue, please refer to the Mozilla security advisories.

Affected Version(s)

Firefox 153.7

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1792485

https://www.mozilla.org/security/advisories/mfsa2026-125/

https://www.mozilla.org/security/advisories/mfsa2026-127/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

Armin Ebert

CVE-2026-124910 Data

JSON