CVE-2026-124853
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ES
CVSS
9.6
Crítico
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026
Sin historial EPSS suficiente todavía.
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2058035
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-125/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-126/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-127/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-128/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-129/
Sin CVEs relacionados por CWE o producto.