Mozilla Foundation Security Advisory 2026-127

Security Vulnerabilities fixed in Firefox ESR 153.7

Announced
November 10, 2026
Impact
high
Products
Firefox ESR
Fixed in
  • Firefox ESR 153.7

#CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124854: Privilege escalation in the DOM: Navigation component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124855: Sandbox escape in the DOM: Navigation component

Reporter
Tran Quac
Impact
high
References

#CVE-2026-124856: Incorrect boundary conditions in the Networking: HTTP component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124857: Use-after-free in the Graphics: Canvas2D component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124858: Use-after-free in the DOM: HTML Parser component

Reporter
Amy Burnett of OpenAI
Impact
high
References

#CVE-2026-124859: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124860: Use-after-free in the Audio/Video component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124861: Sandbox escape due to use-after-free in the Audio/Video: cubeb component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124862: Use-after-free in the DOM: Core & HTML component

Reporter
Mozilla
Impact
high
References

#CVE-2026-118007: Use-after-free in the JavaScript: GC component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124863: Use-after-free in the DOM: HTML Parser component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124864: Sandbox escape due to use-after-free in the DOM: Service Workers component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124865: Use-after-free in the Audio/Video component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124866: Use-after-free in the Layout component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124868: Incorrect boundary conditions in the DOM: Core & HTML component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124869: Use-after-free in the DOM: Core & HTML component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124870: Incorrect boundary conditions in the JavaScript: GC component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124872: Use-after-free in the Cycle Collector component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124873: Invalid pointer in the DOM: Editor component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124874: Same-origin policy bypass in the Networking: HTTP component

Reporter
Minseong Kim
Impact
high
References

#CVE-2026-124875: Incorrect boundary conditions in the DOM: CSS Object Model component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124876: Use-after-free in the CSS Parsing and Computation component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124877: Use-after-free in the Layout: Positioned component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124879: Invalid pointer in the Networking: Cache component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124880: Use-after-free in the DOM: Core & HTML component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124881: Use-after-free in the CSS Parsing and Computation component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124882: Use-after-free in the CSS Parsing and Computation component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124883: Use-after-free in the DOM: Core & HTML component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124884: Use-after-free in the JavaScript: GC component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124885: Use-after-free in the Graphics: Text component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124886: Invalid pointer in the Layout: Text and Fonts component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124887: Incorrect boundary conditions in the Layout: Text and Fonts component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124888: Incorrect boundary conditions in the Layout: Text and Fonts component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124889: Use-after-free in the CSS Parsing and Computation component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124890: Use-after-free in the DOM: Core & HTML component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124891: Incorrect boundary conditions in the DOM: Selection component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124892: Use-after-free in the JavaScript: GC component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124893: Use-after-free in the DOM: Workers component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124894: Use-after-free in the Networking: Cookies component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124895: Use-after-free in the Storage: localStorage & sessionStorage component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124896: Invalid pointer in the Layout: Text and Fonts component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124897: Use-after-free in the JavaScript: GC component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124898: Use-after-free in the DOM: Editor component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124899: Use-after-free in the Layout: Text and Fonts component

Reporter
OpenAI Codex Security (kylebot)
Impact
high
References

#CVE-2026-124901: Other issue in the Networking: JAR component

Reporter
dodoh4t
Impact
high
References

#CVE-2026-124902: Same-origin policy bypass due to race condition in the Audio/Video component

Reporter
dodoh4t
Impact
high
References

#CVE-2026-124903: Sandbox escape due to use-after-free in the IPC component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124905: Sandbox escape in the DOM: Navigation component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124906: Use-after-free in the Graphics: WebRender component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124907: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component

Reporter
Mozilla
Impact
high
References

#CVE-2026-124909: Information disclosure in the Private Browsing component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124910: Mitigation bypass in the WebExtensions component

Reporter
Armin Ebert
Impact
moderate
References

#CVE-2026-124912: Spoofing issue in the DOM: Security component

Reporter
LatticeBased
Impact
moderate
References

#CVE-2026-118019: Race condition, use-after-free in the DOM: File component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124913: Site isolation issue in the Networking component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124914: Site isolation issue in the DOM: Navigation component

Reporter
thegoldmandm
Impact
moderate
References

#CVE-2026-124915: Incorrect boundary conditions in the Graphics: WebGPU component

Reporter
5up3rh3i
Impact
moderate
References

#CVE-2026-124917: Sandbox escape due to use-after-free in the Widget: Gtk component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124918: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124919: Privilege escalation due to use-after-free in the WebRTC: Networking component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124922: Use-after-free in the CSS Transitions and Animations component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124924: Incorrect boundary conditions in the Graphics: WebRender component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124926: Incorrect boundary conditions in the WebRTC component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124927: Site isolation issue in the Graphics: WebRender component

Reporter
fakegiraffe
Impact
moderate
References

#CVE-2026-124929: Information disclosure in the Layout: Form Controls component

Reporter
Takashi Suzuki
Impact
moderate
References

#CVE-2026-118024: Use-after-free in the Graphics: Text component

Reporter
Mozilla
Impact
moderate
References

#CVE-2026-124930: Information disclosure in the Address Bar component

Reporter
Takashi Suzuki
Impact
moderate
References

#CVE-2026-124931: Same-origin policy bypass in the DOM: Core & HTML component

Reporter
Takashi Suzuki
Impact
moderate
References

#CVE-2026-124932: Use-after-free in the Graphics component

Reporter
Nguyen Tuan Hung
Impact
moderate
References

#CVE-2026-124933: Sandbox escape in the Console component

Reporter
r0keb
Impact
moderate
References

#CVE-2026-124934: Spoofing issue in the Security component

Reporter
Umar Farooq
Impact
low
References

#CVE-2026-124935: Undefined behavior in the WebRTC: Networking component

Reporter
Mozilla
Impact
low
References

#CVE-2026-124938: Mitigation bypass in the Add-ons Manager component

Reporter
Nguyen Tuan Hung
Impact
low
References

#CVE-2026-124939: JIT miscompilation in the JavaScript Engine: JIT component

Reporter
SecBuddyN, Tencent KeenLab (CodeBuddy Security)
Impact
low
References

#CVE-2026-124940: Mitigation bypass in the File Handling component

Reporter
Takashi Suzuki
Impact
low
References

#CVE-2026-124941: Information disclosure in the Security: RLBox component

Reporter
Shravan Narayan
Impact
low
References

#CVE-2026-124942: Invalid pointer in the DOM: Streams component

Reporter
Mozilla
Impact
low
References

#CVE-2026-124948: Incorrect boundary conditions, use-after-free in the Graphics component

Reporter
Mozilla
Impact
low
References

#CVE-2026-124951: Privilege escalation in the Nimbus Desktop Client component

Reporter
Mozilla
Impact
low
References