Same-Origin Policy Bypass in Firefox by Mozilla

CVE-2026-124950

What is CVE-2026-124950?

A vulnerability exists in the CSS Parsing and Computation component of Mozilla Firefox that allows attackers to bypass the same-origin policy. This issue could enable malicious web pages to access data from other origins, presenting a significant risk to users' information security. The vulnerability has been addressed in Firefox version 160, where necessary patches and improvements were implemented to mitigate potential exploitation. Users are encouraged to update their browsers to maintain security and protect against such vulnerabilities.

References