---
id: "CVE-2026-124926"
page: "https://infrastack.ai/live/CVE-2026-124926"
kind: "vulnerability"
aliases: ["CVE-2026-124926"]
title: "Firefox: incorrect boundary checks in WebRTC component allow unknown harm"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["browser", "firefox", "runtime", "webrtc"]
not_affected_if: ["up-to-date-firefox"]
published_at: "2026-11-10T14:17:26+00:00"
first_seen_at: "2026-11-10T14:22:18+00:00"
updated_at: "2026-11-10T14:24:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124926", "first_seen_at": "2026-11-10T14:22:18+00:00"}]
exploit_sources: []
---

# Firefox: incorrect boundary checks in WebRTC component allow unknown harm

Link for people: https://infrastack.ai/live/CVE-2026-124926 (this .md is for agents)

Firefox's WebRTC component, used for real-time audio and video in the browser, has incorrect boundary condition handling. The sources do not state what an attacker gains beyond the flaw existing and being fixed in Firefox 160 and Firefox ESR 153.7.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Firefox version in Help > About Firefox; `unknown` if the sources do not give a command.
- Compare against the fixed versions: Firefox 160 and Firefox ESR 153.7.

## Fix

- Firefox: `160`
- Firefox ESR: `153.7`

## Timeline

- 2026-11-10T14:22:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124926

## From the sources

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_