{"id":"CVE-2026-124866","kind":"vulnerability","aliases":["CVE-2026-124866"],"related":[],"title":"Firefox: use-after-free in Layout component may let attackers run code","description":"Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"A use-after-free bug in the Layout component of Firefox can corrupt memory when a page is rendered. The sources do not state what an attacker gets beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","firefox","other"],"not_affected_if":["already-updated"],"how_to_check":"- Run `about:support` in Firefox and read the Application Basics version\n- Check that the version is at least `160` (or `153.7` on the ESR channel)","fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","status":"open","published_at":"2026-11-10T14:17:19+00:00","first_seen_at":"2026-11-10T14:22:14+00:00","triaged_at":"2026-11-10T14:26:30+00:00","updated_at":"2026-11-10T14:26:30+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-10T14:26:30Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","reach":"internet","title":"Firefox: use-after-free in Layout component may let attackers run code","impact":"high","summary":"A use-after-free bug in the Layout component of Firefox can corrupt memory when a page is rendered. The sources do not state what an attacker gets beyond that.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","browser"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; memory corruption in the browser engine, impact not stated","analyst_note":"Confirm the trigger (web page only or also other inputs), exploitation status and the attacker outcome from the Mozilla advisory for Firefox 160 and ESR 153.7.","how_to_check":"- Run `about:support` in Firefox and read the Application Basics version\n- Check that the version is at least `160` (or `153.7` on the ESR channel)","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 (Help > About Firefox).","product_name":"","needs_analyst":true,"not_affected_if":["already-updated"],"who_is_affected":"Anyone running Firefox older than version 160 or Firefox ESR older than 153.7. The sources do not describe the trigger conditions, so the unknown part is whether ordinary browsing is enough to reach the flaw.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000721,"input_tokens":4464,"output_tokens":549,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124866':16A,19A '-2026':15A,18A '153.7':70C '160':66C 'attack':11A,49B 'beyond':51B 'browser':20B 'bug':27B 'code':13A 'compon':8A,31B,59C 'corrupt':35B 'cve':14A,17A 'esr':69C 'firefox':1A,21B,33B,65C,68C 'fix':63C 'free':5A,26B,55C 'get':50B 'layout':7A,30B,58C 'let':10A 'may':9A 'memori':36B 'page':39B 'render':41B 'run':12A 'sourc':43B 'state':46B 'use':3A,24B,53C 'use-after-fre':2A,23B,52C 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox older than version 160 or Firefox ESR older than 153.7. The sources do not describe the trigger conditions, so the unknown part is whether ordinary browsing is enough to reach the flaw.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 (Help > About Firefox).","pkeys":[],"ptokens":[],"labels":["browser","firefox","other","unknown"],"campaign_type":null,"search_a":"'-124866':16A,19A '-2026':15A,18A 'attack':11A 'code':13A 'compon':8A 'cve':14A,17A 'firefox':1A 'free':5A 'layout':7A 'let':10A 'may':9A 'run':12A 'use':3A 'use-after-fre':2A","search_b":"'attack':49B 'beyond':51B 'browser':20B 'bug':27B 'compon':31B 'corrupt':35B 'firefox':21B,33B 'free':26B 'get':50B 'layout':30B 'memori':36B 'page':39B 'render':41B 'sourc':43B 'state':46B 'use':24B 'use-after-fre':23B","search_c":"'153.7':70C '160':66C 'compon':59C 'esr':69C 'firefox':65C,68C 'fix':63C 'free':55C 'layout':58C 'use':53C 'use-after-fre':52C 'vulner':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:19+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124866","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124866","severity":null,"published_at":"2026-11-10T14:17:19+00:00","modified_at":"2026-11-10T14:17:19+00:00","first_seen_at":"2026-11-10T14:22:14+00:00","fetched_at":"2026-11-10T14:22:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}