Sandbox Escape in Firefox by Mozilla
CVE-2026-124923

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124923?

A vulnerability has been discovered in the Agent component of Firefox that allows for a sandbox escape, potentially enabling unauthorized actions within the browser's secure environment. This issue was effectively resolved in Firefox version 160. Users are advised to update their browsers to ensure complete protection against this type of attack and to maintain the integrity of their browsing experience.

Affected Version(s)

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2074806

https://www.mozilla.org/security/advisories/mfsa2026-125/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

Mozilla

CVE-2026-124923 Data

JSON