PULSE
ESPT
FEED
ransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Other
← All CVEs
CVE WatchNov 10, 2026

CVE-2026-124926

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and

CVSS

8.8

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-120

EPSS · 30d

Not enough EPSS history yet.

Technical description

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1100887.8 HIG
—
———Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.8hCVE-2026-1100876.7 MED
—
———Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.8hCVE-2026-1249478.8 HIG
—
——0Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.11hCVE-2026-1249248.8 HIG
—
——0Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.9hCVE-2026-1249188.8 HIG
—
——0Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.9hCVE-2026-1249158.8 HIG
—
——0Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.9h