WebRender Vulnerability in Firefox by Mozilla
CVE-2026-124927

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124927?

A site isolation vulnerability has been identified in the WebRender component of Firefox, which can potentially allow attackers to bypass security boundaries. This issue could compromise the integrity of isolated content and has been addressed in Firefox version 160 and Firefox ESR version 153.7. Users are advised to update their browsers to the latest versions to mitigate any risks associated with this vulnerability, ensuring a safer browsing experience.

Affected Version(s)

Firefox 153.7

Firefox 160

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2078669

https://www.mozilla.org/security/advisories/mfsa2026-125/

https://www.mozilla.org/security/advisories/mfsa2026-127/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

fakegiraffe

CVE-2026-124927 Data

JSON