{"id":"CVE-2026-124883","kind":"vulnerability","aliases":["CVE-2026-124883"],"related":[],"title":"Firefox: use-after-free in the DOM core lets memory corruption occur","description":"Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"A use-after-free bug in Firefox's DOM Core and HTML component lets memory be reused after it is freed. The sources do not state what an attacker can do beyond memory corruption.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","firefox","runtime"],"not_affected_if":["esr-153.7-or-later","firefox-160-or-later"],"how_to_check":"- Check the Firefox version in the browser's About page or with `firefox --version`\n- Compare against the fixed releases: Firefox `160` and Firefox ESR `153.7`","fix":"- Firefox `160`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:21+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","triaged_at":"2026-11-10T14:26:09+00:00","updated_at":"2026-11-10T14:26:09+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-10T14:26:09Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `153.7`","reach":"internet","title":"Firefox: use-after-free in the DOM core lets memory corruption occur","impact":"high","summary":"A use-after-free bug in Firefox's DOM Core and HTML component lets memory be reused after it is freed. The sources do not state what an attacker can do beyond memory corruption.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browser"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown: sources only confirm a memory-safety flaw","analyst_note":"Confirm the attack vector, whether user interaction is needed, and the impact from the Mozilla security advisory for Firefox 160.","how_to_check":"- Check the Firefox version in the browser's About page or with `firefox --version`\n- Compare against the fixed releases: Firefox `160` and Firefox ESR `153.7`","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 from the Firefox menu's About page.","product_name":"","needs_analyst":true,"not_affected_if":["firefox-160-or-later","esr-153.7-or-later"],"who_is_affected":"Anyone running a Firefox version older than 160 or ESR older than 153.7 is exposed, and browsing untrusted web pages is the normal path to trigger it. unknown whether the flaw needs a specific configuration.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000731,"input_tokens":4478,"output_tokens":567,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124883':16A,19A '-2026':15A,18A '153.7':78C '160':74C 'attack':52B 'beyond':55B 'browser':20B 'bug':28B 'compon':36B,67C 'core':9A,33B,65C 'corrupt':12A,57B 'cve':14A,17A 'dom':8A,32B,64C 'esr':77C 'firefox':1A,21B,30B,73C,76C 'fix':71C 'free':5A,27B,61C 'freed':44B 'html':35B,66C 'let':10A,37B 'memori':11A,38B,56B 'occur':13A 'reus':40B 'runtim':22B 'sourc':46B 'state':49B 'use':3A,25B,59C 'use-after-fre':2A,24B,58C 'vulner':69C","nicknames":[],"mitigations":[],"who_affected":"Anyone running a Firefox version older than 160 or ESR older than 153.7 is exposed, and browsing untrusted web pages is the normal path to trigger it. unknown whether the flaw needs a specific configuration.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 from the Firefox menu's About page.","pkeys":[],"ptokens":[],"labels":["browser","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124883':16A,19A '-2026':15A,18A 'core':9A 'corrupt':12A 'cve':14A,17A 'dom':8A 'firefox':1A 'free':5A 'let':10A 'memori':11A 'occur':13A 'use':3A 'use-after-fre':2A","search_b":"'attack':52B 'beyond':55B 'browser':20B 'bug':28B 'compon':36B 'core':33B 'corrupt':57B 'dom':32B 'firefox':21B,30B 'free':27B 'freed':44B 'html':35B 'let':37B 'memori':38B,56B 'reus':40B 'runtim':22B 'sourc':46B 'state':49B 'use':25B 'use-after-fre':24B","search_c":"'153.7':78C '160':74C 'compon':67C 'core':65C 'dom':64C 'esr':77C 'firefox':73C,76C 'fix':71C 'free':61C 'html':66C 'use':59C 'use-after-fre':58C 'vulner':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124883","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124883","severity":null,"published_at":"2026-11-10T14:17:21+00:00","modified_at":"2026-11-10T14:17:21+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","fetched_at":"2026-11-10T14:22:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}