---
id: "CVE-2026-124875"
page: "https://infrastack.ai/live/CVE-2026-124875"
kind: "vulnerability"
aliases: ["CVE-2026-124875"]
title: "Firefox: CSS Object Model boundary bug fixed in Firefox 160"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Firefox", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["browsers", "firefox", "other"]
not_affected_if: ["fixed-version"]
published_at: "2026-11-10T14:17:20+00:00"
first_seen_at: "2026-11-10T14:22:14+00:00"
updated_at: "2026-11-10T14:26:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124875", "first_seen_at": "2026-11-10T14:22:14+00:00"}]
exploit_sources: []
---

# Firefox: CSS Object Model boundary bug fixed in Firefox 160

Link for people: https://infrastack.ai/live/CVE-2026-124875 (this .md is for agents)

Firefox's DOM CSS Object Model component has an incorrect boundary condition, per the NVD entry. The sources do not state what an attacker can do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Firefox affected range not listed fixed no fixed version listed

## How to check

- Check the installed Firefox version in the browser's About page or with `firefox --version`
- Compare it against the fixed releases: Firefox `160`, Firefox ESR `115.45`, Firefox ESR `153.7`

## Fix

- Firefox `160`
- Firefox ESR `115.45`
- Firefox ESR `153.7`

## Timeline

- 2026-11-10T14:22:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124875

## From the sources

Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_