{"id":"CVE-2026-124895","kind":"vulnerability","aliases":["CVE-2026-124895"],"related":[],"title":"Firefox: use-after-free in localStorage and sessionStorage can crash or run code","description":"Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.","summary":"Firefox has a use-after-free bug in its localStorage and sessionStorage component, which handles data web pages store in the browser. The sources do not state what an attacker gets beyond the memory corruption itself.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Firefox","fixed":[],"affected":"","ecosystem":"runtime"}],"ecosystems":["runtime"],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["patched-firefox"],"how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare it against the fixed versions: Firefox `160`, Firefox ESR `115.45`, and Firefox ESR `153.7`.","fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","triaged_at":"2026-11-10T14:24:58+00:00","updated_at":"2026-11-10T14:24:58+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-10T14:24:58Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","reach":"internet","title":"Firefox: use-after-free in localStorage and sessionStorage can crash or run code","impact":"high","summary":"Firefox has a use-after-free bug in its localStorage and sessionStorage component, which handles data web pages store in the browser. The sources do not state what an attacker gets beyond the memory corruption itself.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"unknown: memory corruption in the browser, possibly code execution","analyst_note":"Check the Mozilla Firefox security advisory for this CVE to confirm exploitability, user interaction needs and whether it is fixed in all listed branches.","how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare it against the fixed versions: Firefox `160`, Firefox ESR `115.45`, and Firefox ESR `153.7`.","plain_action":"Update Firefox to version 160, or to ESR 115.45 or 153.7 if you use the ESR release.","product_name":"Firefox","needs_analyst":true,"not_affected_if":["patched-firefox"],"who_is_affected":"Anyone running a Firefox build older than the fixed versions is exposed, since the bug sits in the browser's own storage code that every web page can reach. Users on a patched Firefox release can skip it. The sources do not say whether exploitation needs any particular page or action.","user_interaction":"unknown","product_ecosystem":"runtime","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000765,"input_tokens":4500,"output_tokens":630,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124895':17A,20A '-2026':16A,19A '115.45':81C '153.7':85C '160':78C 'attack':56B 'beyond':58B 'browser':22B,48B 'bug':33B 'code':14A 'compon':39B,71C 'corrupt':61B 'crash':11A 'cve':15A,18A 'data':42B 'desktop':23B 'esr':80C,84C 'firefox':1A,21A,24B,26B,77C,79C,83C 'fix':75C 'free':5A,32B,65C 'get':57B 'handl':41B 'localstorag':7A,36B,69C 'memori':60B 'page':44B 'run':13A 'runtim':25B 'sessionstorag':9A,38B,70C 'sourc':50B 'state':53B 'storag':68C 'store':45B 'use':3A,30B,63C 'use-after-fre':2A,29B,62C 'vulner':73C 'web':43B","nicknames":[],"mitigations":[],"who_affected":"Anyone running a Firefox build older than the fixed versions is exposed, since the bug sits in the browser's own storage code that every web page can reach. Users on a patched Firefox release can skip it. The sources do not say whether exploitation needs any particular page or action.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160, or to ESR 115.45 or 153.7 if you use the ESR release.","pkeys":["firefox"],"ptokens":["firefox"],"labels":["browsers","desktop","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124895':17A,20A '-2026':16A,19A 'code':14A 'crash':11A 'cve':15A,18A 'firefox':1A,21A 'free':5A 'localstorag':7A 'run':13A 'sessionstorag':9A 'use':3A 'use-after-fre':2A","search_b":"'attack':56B 'beyond':58B 'browser':22B,48B 'bug':33B 'compon':39B 'corrupt':61B 'data':42B 'desktop':23B 'firefox':24B,26B 'free':32B 'get':57B 'handl':41B 'localstorag':36B 'memori':60B 'page':44B 'runtim':25B 'sessionstorag':38B 'sourc':50B 'state':53B 'store':45B 'use':30B 'use-after-fre':29B 'web':43B","search_c":"'115.45':81C '153.7':85C '160':78C 'compon':71C 'esr':80C,84C 'firefox':77C,79C,83C 'fix':75C 'free':65C 'localstorag':69C 'sessionstorag':70C 'storag':68C 'use':63C 'use-after-fre':62C 'vulner':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124895","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124895","severity":null,"published_at":"2026-11-10T14:17:23+00:00","modified_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","fetched_at":"2026-11-10T14:22:16+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}