{"id":"CVE-2026-124898","kind":"vulnerability","aliases":["CVE-2026-124898"],"related":[],"title":"Firefox: use-after-free in the DOM Editor component, fixed in 160","description":"Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.","summary":"A memory-safety bug (use-after-free) in Firefox's DOM Editor component lets freed memory be reused, which can crash the browser or be abused to run attacker code. The sources do not say how it is triggered or what an attacker can achieve beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Firefox","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","firefox","runtime"],"not_affected_if":["firefox-160-or-later"],"how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line\n- Compare against the fixed versions: `160`, `115.45` (ESR), `153.7` (ESR)","fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","triaged_at":"2026-11-10T14:24:54+00:00","updated_at":"2026-11-10T14:24:54+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-10T14:24:54Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `115.45`\n- Firefox ESR `153.7`","reach":"internet","title":"Firefox: use-after-free in the DOM Editor component, fixed in 160","impact":"high","summary":"A memory-safety bug (use-after-free) in Firefox's DOM Editor component lets freed memory be reused, which can crash the browser or be abused to run attacker code. The sources do not say how it is triggered or what an attacker can achieve beyond that.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browsers"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; use-after-free may allow code execution in the browser","analyst_note":"Check the Mozilla security advisory for CVE-2026-124898 to confirm trigger conditions, exploitability and the worst-case impact.","how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line\n- Compare against the fixed versions: `160`, `115.45` (ESR), `153.7` (ESR)","plain_action":"Update Firefox to version 160, or to ESR 115.45 or 153.7 if you use the ESR release.","product_name":"Firefox","needs_analyst":true,"not_affected_if":["firefox-160-or-later"],"who_is_affected":"Anyone running a Firefox version older than the fixed releases named in the sources. The sources do not say whether specific page content or settings are needed to trigger the flaw.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000747,"input_tokens":4484,"output_tokens":598,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124898':16A,19A '-2026':15A,18A '115.45':90C '153.7':94C '160':13A,87C 'abus':51B 'achiev':70B 'attack':54B,68B 'beyond':71B 'browser':21B,48B 'bug':28B 'code':55B 'compon':10A,38B,80C 'crash':46B 'cve':14A,17A 'dom':8A,36B,78C 'editor':9A,37B,79C 'esr':89C,93C 'firefox':1A,20A,22B,34B,86C,88C,92C 'fix':11A,84C 'free':5A,32B,75C 'freed':40B 'let':39B 'memori':26B,41B 'memory-safeti':25B 'reus':43B 'run':53B 'runtim':23B 'safeti':27B 'say':60B 'sourc':57B 'trigger':64B 'use':3A,30B,73C 'use-after-fre':2A,29B,72C 'vulner':82C","nicknames":[],"mitigations":[],"who_affected":"Anyone running a Firefox version older than the fixed releases named in the sources. The sources do not say whether specific page content or settings are needed to trigger the flaw.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160, or to ESR 115.45 or 153.7 if you use the ESR release.","pkeys":["firefox"],"ptokens":["firefox"],"labels":["browsers","firefox","runtime","unknown","vendor"],"campaign_type":null,"search_a":"'-124898':16A,19A '-2026':15A,18A '160':13A 'compon':10A 'cve':14A,17A 'dom':8A 'editor':9A 'firefox':1A,20A 'fix':11A 'free':5A 'use':3A 'use-after-fre':2A","search_b":"'abus':51B 'achiev':70B 'attack':54B,68B 'beyond':71B 'browser':21B,48B 'bug':28B 'code':55B 'compon':38B 'crash':46B 'dom':36B 'editor':37B 'firefox':22B,34B 'free':32B 'freed':40B 'let':39B 'memori':26B,41B 'memory-safeti':25B 'reus':43B 'run':53B 'runtim':23B 'safeti':27B 'say':60B 'sourc':57B 'trigger':64B 'use':30B 'use-after-fre':29B","search_c":"'115.45':90C '153.7':94C '160':87C 'compon':80C 'dom':78C 'editor':79C 'esr':89C,93C 'firefox':86C,88C,92C 'fix':84C 'free':75C 'use':73C 'use-after-fre':72C 'vulner':82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124898","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124898","severity":null,"published_at":"2026-11-10T14:17:23+00:00","modified_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","fetched_at":"2026-11-10T14:22:16+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}