{"id":"CVE-2026-124908","kind":"vulnerability","aliases":["CVE-2026-124908"],"related":[],"title":"Firefox: use-after-free in CSS parsing lets attackers run code","description":"Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.","summary":"A use-after-free bug in Firefox's CSS parsing and computation component lets memory be reused after it is freed. The sources do not state what an attacker can do beyond that, so the impact is unconfirmed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","firefox","runtime"],"not_affected_if":["firefox-160-or-later"],"how_to_check":"- Check the installed Firefox version in Help > About Firefox.\n- Versions earlier than `160` are the ones the sources say were fixed in `160`.","fix":"- Firefox: move to `160` or later, as the sources state this was fixed in Firefox 160.","status":"open","published_at":"2026-11-10T14:17:24+00:00","first_seen_at":"2026-11-10T14:22:17+00:00","triaged_at":"2026-11-10T14:24:43+00:00","updated_at":"2026-11-10T14:24:43+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-10T14:24:43Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox: move to `160` or later, as the sources state this was fixed in Firefox 160.","reach":"unknown","title":"Firefox: use-after-free in CSS parsing lets attackers run code","impact":"medium","summary":"A use-after-free bug in Firefox's CSS parsing and computation component lets memory be reused after it is freed. The sources do not state what an attacker can do beyond that, so the impact is unconfirmed.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["firefox","browser"],"confidence":0.4,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources do not describe the impact","analyst_note":"Check the NVD entry and Mozilla's advisory for the exploit conditions and whether the flaw is reachable from web content.","how_to_check":"- Check the installed Firefox version in Help > About Firefox.\n- Versions earlier than `160` are the ones the sources say were fixed in `160`.","plain_action":"Update Firefox to version 160 or later: Help > About Firefox.","product_name":"","needs_analyst":true,"not_affected_if":["firefox-160-or-later"],"who_is_affected":"Anyone running Firefox before version 160 is affected. The sources do not describe a specific configuration or required interaction.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000694,"input_tokens":4467,"output_tokens":494,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124908':15A,18A '-2026':14A,17A '160':78C 'attack':10A,51B 'beyond':54B 'browser':19B 'bug':27B 'code':12A 'compon':35B,71C 'comput':34B,70C 'css':7A,31B,67C 'cve':13A,16A 'firefox':1A,20B,29B,77C 'fix':75C 'free':5A,26B,64C 'freed':43B 'impact':58B 'let':9A,36B 'memori':37B 'pars':8A,32B,68C 'reus':39B 'run':11A 'runtim':21B 'sourc':45B 'state':48B 'unconfirm':60B 'use':3A,24B,62C 'use-after-fre':2A,23B,61C 'vulner':73C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox before version 160 is affected. The sources do not describe a specific configuration or required interaction.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or later: Help > About Firefox.","pkeys":[],"ptokens":[],"labels":["browser","firefox","runtime","unknown"],"campaign_type":null,"search_a":"'-124908':15A,18A '-2026':14A,17A 'attack':10A 'code':12A 'css':7A 'cve':13A,16A 'firefox':1A 'free':5A 'let':9A 'pars':8A 'run':11A 'use':3A 'use-after-fre':2A","search_b":"'attack':51B 'beyond':54B 'browser':19B 'bug':27B 'compon':35B 'comput':34B 'css':31B 'firefox':20B,29B 'free':26B 'freed':43B 'impact':58B 'let':36B 'memori':37B 'pars':32B 'reus':39B 'runtim':21B 'sourc':45B 'state':48B 'unconfirm':60B 'use':24B 'use-after-fre':23B","search_c":"'160':78C 'compon':71C 'comput':70C 'css':67C 'firefox':77C 'fix':75C 'free':64C 'pars':68C 'use':62C 'use-after-fre':61C 'vulner':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124908","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124908","severity":null,"published_at":"2026-11-10T14:17:24+00:00","modified_at":"2026-11-10T14:17:24+00:00","first_seen_at":"2026-11-10T14:22:17+00:00","fetched_at":"2026-11-10T14:22:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}