Use-After-Free Vulnerability in Firefox by Mozilla
CVE-2026-124952

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-124952?

A use-after-free vulnerability affecting the Audio/Video component in Firefox can allow an attacker to execute arbitrary code, potentially compromising user data and system integrity. Mozilla has addressed this issue in Firefox ESR version 115.45, encouraging users to update to this latest version to mitigate risks associated with the vulnerability.

Affected Version(s)

Firefox 115.45

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2071647

https://www.mozilla.org/security/advisories/mfsa2026-126/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Nov 9, 2026

Credit

andrew.kemeklis

CVE-2026-124952 Data

JSON