---
id: "CVE-2026-124873"
page: "https://infrastack.ai/live/CVE-2026-124873"
kind: "vulnerability"
aliases: ["CVE-2026-124873"]
title: "Firefox: invalid pointer in DOM Editor component, fixed in 160"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["browser", "firefox", "other"]
not_affected_if: ["firefox-160-or-later"]
published_at: "2026-11-10T14:17:19+00:00"
first_seen_at: "2026-11-10T14:22:14+00:00"
updated_at: "2026-11-10T14:26:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124873", "first_seen_at": "2026-11-10T14:22:14+00:00"}]
exploit_sources: []
---

# Firefox: invalid pointer in DOM Editor component, fixed in 160

Link for people: https://infrastack.ai/live/CVE-2026-124873 (this .md is for agents)

Firefox has an invalid pointer bug in its DOM Editor component. The sources do not say what an attacker can do with it beyond the memory error itself.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check your Firefox version in Help > About Firefox; the sources name Firefox 160 and Firefox ESR 153.7 as the fixed releases.

## Fix

- `Firefox 160`
- `Firefox ESR 153.7`

## Timeline

- 2026-11-10T14:22:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124873

## From the sources

Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_