Mitigation Bypass Vulnerability in Firefox Add-ons Manager
CVE-2026-124938

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124938?

A mitigation bypass vulnerability exists in the Add-ons Manager component of Firefox, allowing potential exploits that could compromise user security. This issue was addressed in Firefox version 160 and Firefox ESR 153.7, with updates provided to enhance system integrity and safeguard against unauthorized access. Users are encouraged to ensure their installations are up to date to protect against potential attacks leveraging this vulnerability. For detailed information on security provisions, refer to Mozilla's official advisories.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Tuan Hung
.