Sandbox Escape Vulnerability in Firefox Due to Use-After-Free in Gtk Widget

CVE-2026-124917

What is CVE-2026-124917?

A potential sandbox escape vulnerability has been identified in the Gtk component of Firefox, attributed to a use-after-free flaw. This issue could allow an attacker to escape the confines of the browser's sandbox and execute arbitrary code, leading to potential system compromise. The vulnerability has been addressed in Firefox version 160 and Firefox ESR version 153.7, where the memory management issues have been rectified to strengthen the browser's integrity and security.

References