CVE-2026-124948

8.8 HIGH

Published 2026-11-10 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-119, CWE-416

All references

https://bugzilla.mozilla.org/show_bug.cgi?id=2081960
https://www.mozilla.org/security/advisories/mfsa2026-125/
https://www.mozilla.org/security/advisories/mfsa2026-127/
https://www.mozilla.org/security/advisories/mfsa2026-128/
https://www.mozilla.org/security/advisories/mfsa2026-129/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-105249PoC
MEDIUMCVE-2026-108538PoC
MEDIUMCVE-2026-108539PoC
MEDIUMCVE-2026-112094PoC
HIGHCVE-2026-120337PoC
MEDIUMCVE-2026-18785PoC
HIGHCVE-2016-15060PoC
MEDIUMCVE-2025-55654PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.