{"id":"CVE-2026-124906","kind":"vulnerability","aliases":["CVE-2026-124906"],"related":[],"title":"Firefox: use-after-free in WebRender graphics component can crash or run code","description":"Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"Firefox's WebRender graphics component has a use-after-free bug, where memory is used after it has been released. The sources do not state what an attacker can get from it beyond that memory corruption.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","runtime"],"not_affected_if":["running-firefox-160-or-later","running-firefox-esr-153.7-or-later"],"how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare the version against the fixed releases: Firefox 160 and Firefox ESR 153.7.","fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","status":"open","published_at":"2026-11-10T14:17:24+00:00","first_seen_at":"2026-11-10T14:22:17+00:00","triaged_at":"2026-11-10T14:24:45+00:00","updated_at":"2026-11-10T14:24:45+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-10T14:24:45Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox: `160`\n- Firefox ESR: `153.7`","reach":"unknown","title":"Firefox: use-after-free in WebRender graphics component can crash or run code","impact":"medium","summary":"Firefox's WebRender graphics component has a use-after-free bug, where memory is used after it has been released. The sources do not state what an attacker can get from it beyond that memory corruption.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; memory corruption in the browser, code execution not stated","analyst_note":"Confirm the trigger conditions, whether code execution is possible, and whether an exploit or advisory from Mozilla gives more detail; source is NVD only.","how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare the version against the fixed releases: Firefox 160 and Firefox ESR 153.7.","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 or later through its built-in update check.","product_name":"","needs_analyst":true,"not_affected_if":["running-firefox-160-or-later","running-firefox-esr-153.7-or-later"],"who_is_affected":"Installations of Firefox older than version 160 or Firefox ESR older than 153.7 are affected. The sources do not say whether any specific configuration is required to reach the bug, so unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000734,"input_tokens":4476,"output_tokens":572,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124906':17A,20A '-2026':16A,19A '153.7':81C '160':77C 'attack':53B 'beyond':58B 'browser':21B 'bug':36B 'code':14A 'compon':9A,29B,70C 'corrupt':61B 'crash':11A 'cve':15A,18A 'desktop':22B 'esr':80C 'firefox':1A,23B,25B,76C,79C 'fix':74C 'free':5A,35B,65C 'get':55B 'graphic':8A,28B,68C 'memori':38B,60B 'releas':45B 'run':13A 'runtim':24B 'sourc':47B 'state':50B 'use':3A,33B,40B,63C 'use-after-fre':2A,32B,62C 'vulner':72C 'webrend':7A,27B,69C","nicknames":[],"mitigations":[],"who_affected":"Installations of Firefox older than version 160 or Firefox ESR older than 153.7 are affected. The sources do not say whether any specific configuration is required to reach the bug, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or Firefox ESR 153.7 or later through its built-in update check.","pkeys":[],"ptokens":[],"labels":["browser","desktop","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124906':17A,20A '-2026':16A,19A 'code':14A 'compon':9A 'crash':11A 'cve':15A,18A 'firefox':1A 'free':5A 'graphic':8A 'run':13A 'use':3A 'use-after-fre':2A 'webrend':7A","search_b":"'attack':53B 'beyond':58B 'browser':21B 'bug':36B 'compon':29B 'corrupt':61B 'desktop':22B 'firefox':23B,25B 'free':35B 'get':55B 'graphic':28B 'memori':38B,60B 'releas':45B 'runtim':24B 'sourc':47B 'state':50B 'use':33B,40B 'use-after-fre':32B 'webrend':27B","search_c":"'153.7':81C '160':77C 'compon':70C 'esr':80C 'firefox':76C,79C 'fix':74C 'free':65C 'graphic':68C 'use':63C 'use-after-fre':62C 'vulner':72C 'webrend':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124906","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124906","severity":null,"published_at":"2026-11-10T14:17:24+00:00","modified_at":"2026-11-10T14:17:24+00:00","first_seen_at":"2026-11-10T14:22:17+00:00","fetched_at":"2026-11-10T14:22:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}