Invalid Pointer Vulnerability in Firefox JavaScript Engine
CVE-2026-124946

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124946?

An invalid pointer dereference vulnerability has been identified in the Just-In-Time (JIT) component of the JavaScript Engine in Firefox. This flaw may allow attackers to exploit memory corruption, leading to potential application crashes or unauthorized code execution. Mozilla has addressed this issue in Firefox version 160, reinforcing the security of its browser and safeguarding user data. It is imperative for users to upgrade to the latest version to mitigate potential risks.

Affected Version(s)

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.