Same-Origin Policy Bypass in Firefox by Mozilla
CVE-2026-124931

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124931?

This vulnerability allows undesired access to resources from different origins in the DOM, potentially exposing sensitive information or functionality. The issue has been identified and addressed in recent updates, specifically in Firefox version 160 and Firefox ESR version 153.7. It is crucial for users and organizations to apply the latest updates to ensure the integrity of their browsing environment and protect against potential exploits.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Takashi Suzuki
.