Privilege Escalation Vulnerability in Firefox WebRender Component
CVE-2026-124918

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124918?

This vulnerability arises from improper handling of boundary conditions in the WebRender component of Firefox, which may allow an attacker to escalate privileges. Specifically, this flaw can impact the integrity and confidentiality of user data. The issue has been addressed in Firefox version 160 and Firefox ESR version 153.7, reinforcing the importance of keeping software up to date to mitigate potential exploitation.

Affected Version(s)

Firefox 153.7

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2058993

https://www.mozilla.org/security/advisories/mfsa2026-125/

https://www.mozilla.org/security/advisories/mfsa2026-127/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

Mozilla

CVE-2026-124918 Data

JSON