CVE-2026-124910
Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thund
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026
Not enough EPSS history yet.
Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=1792485
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-125/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-127/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-128/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-129/
No related CVEs by CWE or product.