---
id: "CVE-2026-124879"
page: "https://infrastack.ai/live/CVE-2026-124879"
kind: "vulnerability"
aliases: ["CVE-2026-124879"]
title: "Firefox: invalid pointer in networking cache may let attackers crash or run code"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["browser", "firefox", "firefox-esr", "runtime"]
not_affected_if: ["already-updated"]
published_at: "2026-11-10T14:17:20+00:00"
first_seen_at: "2026-11-10T14:22:15+00:00"
updated_at: "2026-11-10T14:26:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124879", "first_seen_at": "2026-11-10T14:22:15+00:00"}]
exploit_sources: []
---

# Firefox: invalid pointer in networking cache may let attackers crash or run code

Link for people: https://infrastack.ai/live/CVE-2026-124879 (this .md is for agents)

An invalid pointer in Firefox's Networking Cache component was fixed in Firefox 160 and Firefox ESR 153.7. The sources do not state what an attacker can achieve beyond that memory-safety flaw.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Firefox version in Help > About Firefox, or run `firefox --version`.
- Compare the result against `160` for Firefox and `153.7` for Firefox ESR.

## Fix

- Firefox: `160`
- Firefox ESR: `153.7`

## Timeline

- 2026-11-10T14:22:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124879

## From the sources

Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_