CVE-2026-124917
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbi
CVSS
9.6
Crítico
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026
Sin historial EPSS suficiente todavía.
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2058648
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-125/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-127/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-128/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-129/
Sin CVEs relacionados por CWE o producto.