Undefined Behavior in WebRTC Networking Component Affecting Mozilla Firefox
CVE-2026-124935

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124935?

A vulnerability has been identified in the WebRTC networking component of Mozilla Firefox, which manifests as undefined behavior. This can potentially disrupt normal operations or lead to exploitation by malicious actors. It is imperative for users to update to Firefox version 160 or Firefox ESR version 153.7 to mitigate the risk associated with this vulnerability. For further details, refer to the official security advisories provided by Mozilla.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.