Use-After-Free Vulnerability in Firefox Graphics Component
CVE-2026-124948

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124948?

This vulnerability arises from incorrect boundary conditions in the Graphics component of Firefox, leading to a use-after-free issue. Exploiting this flaw can allow attackers to execute arbitrary code, which may compromise user security and privacy. Mozilla has addressed this vulnerability in Firefox version 160 and Firefox ESR version 153.7, recommending users to update their applications to mitigate potential risks.

Affected Version(s)

Firefox 153.7

Firefox 160

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.