{"id":"CVE-2026-124855","kind":"vulnerability","aliases":["CVE-2026-124855"],"related":[],"title":"Firefox: DOM navigation sandbox escape fixed in versions 160 and ESR 153.7","description":"Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"A flaw in the Navigation component of the DOM lets content escape the browser sandbox, according to the advisory text. The source says it was fixed in Firefox 160 and Firefox ESR 153.7, but does not say what an attacker gets beyond escaping the sandbox.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Firefox","fixed":[],"affected":"","ecosystem":"runtime"}],"ecosystems":["runtime"],"tags":["browser","firefox","runtime"],"not_affected_if":["firefox-already-updated"],"how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- Compare it against `160` for Firefox and `153.7` for Firefox ESR","fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","status":"open","published_at":"2026-11-10T14:17:17+00:00","first_seen_at":"2026-11-10T14:22:13+00:00","triaged_at":"2026-11-10T14:26:43+00:00","updated_at":"2026-11-10T14:26:43+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-10T14:26:43Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","reach":"internet","title":"Firefox: DOM navigation sandbox escape fixed in versions 160 and ESR 153.7","impact":"high","summary":"A flaw in the Navigation component of the DOM lets content escape the browser sandbox, according to the advisory text. The source says it was fixed in Firefox 160 and Firefox ESR 153.7, but does not say what an attacker gets beyond escaping the sandbox.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browser"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Confirm the affected version ranges and exploitation conditions from the NVD entry and Mozilla's advisory, since the sources give only the fixed versions.","how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- Compare it against `160` for Firefox and `153.7` for Firefox ESR","plain_action":"Update Firefox to version 160 or Firefox ESR to 153.7 or later.","product_name":"Firefox","needs_analyst":true,"not_affected_if":["firefox-already-updated"],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"runtime","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000707,"input_tokens":4476,"output_tokens":518,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124855':15A,18A '-2026':14A,17A '153.7':12A,55B,85C '160':9A,51B,81C 'accord':38B 'advisori':41B 'attack':62B 'beyond':64B 'browser':20B,36B 'compon':28B,74C 'content':33B 'cve':13A,16A 'dom':2A,31B,72C 'escap':5A,34B,65B,69C 'esr':11A,54B,84C 'firefox':1A,19A,21B,50B,53B,80C,83C 'fix':6A,48B,78C 'flaw':24B 'get':63B 'let':32B 'navig':3A,27B,73C 'runtim':22B 'sandbox':4A,37B,67B,68C 'say':45B,59B 'sourc':44B 'text':42B 'version':8A 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or Firefox ESR to 153.7 or later.","pkeys":["firefox"],"ptokens":["firefox"],"labels":["browser","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124855':15A,18A '-2026':14A,17A '153.7':12A '160':9A 'cve':13A,16A 'dom':2A 'escap':5A 'esr':11A 'firefox':1A,19A 'fix':6A 'navig':3A 'sandbox':4A 'version':8A","search_b":"'153.7':55B '160':51B 'accord':38B 'advisori':41B 'attack':62B 'beyond':64B 'browser':20B,36B 'compon':28B 'content':33B 'dom':31B 'escap':34B,65B 'esr':54B 'firefox':21B,50B,53B 'fix':48B 'flaw':24B 'get':63B 'let':32B 'navig':27B 'runtim':22B 'sandbox':37B,67B 'say':45B,59B 'sourc':44B 'text':42B","search_c":"'153.7':85C '160':81C 'compon':74C 'dom':72C 'escap':69C 'esr':84C 'firefox':80C,83C 'fix':78C 'navig':73C 'sandbox':68C 'vulner':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124855","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124855","severity":null,"published_at":"2026-11-10T14:17:17+00:00","modified_at":"2026-11-10T14:17:17+00:00","first_seen_at":"2026-11-10T14:22:13+00:00","fetched_at":"2026-11-10T14:22:13+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}