Invalid Pointer Vulnerability in Mozilla Firefox and Firefox ESR

CVE-2026-124942

What is CVE-2026-124942?

This vulnerability pertains to an invalid pointer in the Streams component of Mozilla Firefox, which could lead to potential exploitation through scripts manipulating the DOM. Mozilla has addressed this issue in Firefox version 160 and Firefox ESR version 153.7, releasing security advisories to guide users on safe practices and updates. Users are strongly encouraged to keep their browsers up to date to mitigate any risks associated with this vulnerability.

References