---
id: "CVE-2026-124929"
page: "https://infrastack.ai/live/CVE-2026-124929"
kind: "vulnerability"
aliases: ["CVE-2026-124929"]
title: "Firefox: Layout form controls component leaks information to attackers"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["browser", "firefox", "other"]
not_affected_if: ["up-to-date-firefox"]
published_at: "2026-11-10T14:17:26+00:00"
first_seen_at: "2026-11-10T14:22:18+00:00"
updated_at: "2026-11-10T14:24:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124929", "first_seen_at": "2026-11-10T14:22:18+00:00"}]
exploit_sources: []
---

# Firefox: Layout form controls component leaks information to attackers

Link for people: https://infrastack.ai/live/CVE-2026-124929 (this .md is for agents)

A flaw in the Layout Form Controls component of Firefox lets an attacker read information it should not expose. The description does not say what data leaks or how the attack is triggered.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Firefox version with the About Firefox dialog or `firefox --version`; the sources name Firefox 160 and Firefox ESR 153.7 as the fixed releases.

## Fix

- Firefox `160` and Firefox ESR `153.7` (the sources state these versions contain the fix).

## Timeline

- 2026-11-10T14:22:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124929

## From the sources

Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_