Information Disclosure in Firefox Security Component by Mozilla
CVE-2026-124941

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124941?

An information disclosure vulnerability has been identified in the Security: RLBox component of Mozilla Firefox. This issue can potentially allow unauthorized access to sensitive information. Firefox versions 160 and Firefox ESR version 153.7 have addressed this vulnerability, enhancing the security posture of the browser. Users are encouraged to update to the latest versions to mitigate any associated risks.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Shravan Narayan
.