CVE-2026-124858 | BDVDB-2026-402811 Detail
MozillaFirefox
Description#
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-416 Use After Free
References#
- https://bugzilla.mozilla.org/show_bug.cgi?id=2074172
- https://www.mozilla.org/security/advisories/mfsa2026-125/
- https://www.mozilla.org/security/advisories/mfsa2026-126/
- https://www.mozilla.org/security/advisories/mfsa2026-127/
- https://www.mozilla.org/security/advisories/mfsa2026-128/
- https://www.mozilla.org/security/advisories/mfsa2026-129/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.