{"id":"CVE-2026-124880","kind":"vulnerability","aliases":["CVE-2026-124880"],"related":[],"title":"Firefox: a use-after-free in DOM handling may let attacker run code","description":"Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.","summary":"Firefox has a use-after-free bug in its DOM Core and HTML component, where memory is used after it has been freed. The sources do not state what an attacker gets beyond that, so the impact is not confirmed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","firefox","runtime"],"not_affected_if":["esr-115.45-or-later","esr-153.7-or-later","firefox-160-or-later"],"how_to_check":"- Check the Firefox version with Help > About Firefox, or run `firefox --version` on the machine.\n- Compare against the fixed versions: Firefox `160`, Firefox ESR `115.45`, Firefox ESR `153.7`.","fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:20+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","triaged_at":"2026-11-10T14:26:13+00:00","updated_at":"2026-11-10T14:26:13+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-10T14:26:13Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","reach":"internet","title":"Firefox: a use-after-free in DOM handling may let attacker run code","impact":"high","summary":"Firefox has a use-after-free bug in its DOM Core and HTML component, where memory is used after it has been freed. The sources do not state what an attacker gets beyond that, so the impact is not confirmed.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browsers"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; memory corruption may allow code execution, not confirmed","analyst_note":"Confirm the attack trigger (page visit or not) and the worst-case impact from Mozilla's advisory for this CVE.","how_to_check":"- Check the Firefox version with Help > About Firefox, or run `firefox --version` on the machine.\n- Compare against the fixed versions: Firefox `160`, Firefox ESR `115.45`, Firefox ESR `153.7`.","plain_action":"Update Firefox to version 160, or the ESR version 115.45 or 153.7 if you use that release.","product_name":"","needs_analyst":true,"not_affected_if":["firefox-160-or-later","esr-115.45-or-later","esr-153.7-or-later"],"who_is_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions. Browsers that do not run Firefox are not affected. The sources do not say whether a page visit alone is enough to trigger the bug.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000759,"input_tokens":4490,"output_tokens":619,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124880':17A,20A '-2026':16A,19A '115.45':84C '153.7':88C '160':81C 'attack':12A,55B 'beyond':57B 'browser':21B 'bug':31B 'code':14A 'compon':38B,74C 'confirm':64B 'core':35B,72C 'cve':15A,18A 'dom':8A,34B,71C 'esr':83C,87C 'firefox':1A,22B,24B,80C,82C,86C 'fix':78C 'free':6A,30B,68C 'freed':47B 'get':56B 'handl':9A 'html':37B,73C 'impact':61B 'let':11A 'may':10A 'memori':40B 'run':13A 'runtim':23B 'sourc':49B 'state':52B 'use':4A,28B,42B,66C 'use-after-fre':3A,27B,65C 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions. Browsers that do not run Firefox are not affected. The sources do not say whether a page visit alone is enough to trigger the bug.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160, or the ESR version 115.45 or 153.7 if you use that release.","pkeys":[],"ptokens":[],"labels":["browsers","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124880':17A,20A '-2026':16A,19A 'attack':12A 'code':14A 'cve':15A,18A 'dom':8A 'firefox':1A 'free':6A 'handl':9A 'let':11A 'may':10A 'run':13A 'use':4A 'use-after-fre':3A","search_b":"'attack':55B 'beyond':57B 'browser':21B 'bug':31B 'compon':38B 'confirm':64B 'core':35B 'dom':34B 'firefox':22B,24B 'free':30B 'freed':47B 'get':56B 'html':37B 'impact':61B 'memori':40B 'runtim':23B 'sourc':49B 'state':52B 'use':28B,42B 'use-after-fre':27B","search_c":"'115.45':84C '153.7':88C '160':81C 'compon':74C 'core':72C 'dom':71C 'esr':83C,87C 'firefox':80C,82C,86C 'fix':78C 'free':68C 'html':73C 'use':66C 'use-after-fre':65C 'vulner':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124880","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124880","severity":null,"published_at":"2026-11-10T14:17:20+00:00","modified_at":"2026-11-10T14:17:20+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","fetched_at":"2026-11-10T14:22:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}