CVE-2026-124917
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbi
CVSS
9.6
Crítica
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026
Ainda não há histórico EPSS suficiente.
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2058648
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-125/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-127/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-128/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-129/
Nenhum CVE relacionado por CWE ou produto.