CVE Feed

    Dashboard / CVE / CVE-2026-124928

    CVE-2026-124928

    Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Published:Nov 10, 2026
    Last Modified:Nov 14, 2026
    EPS:Nov 10, 2026
    EPSS Score:0.0019
    CVSS Score:6.1

    Affected Products

    Vendor
    Mozilla
    Product
    Firefox
    Vendor
    Mozilla
    Product
    Thunderbird

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-124952 (CVSS 8.8) — Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.…
    CVE-2026-124950 (CVSS 3.4) — Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefo…
    CVE-2026-124949 (CVSS 3.4) — Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.…
    CVE-2026-124947 (CVSS 8.8) — Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thund…
    CVE-2026-124946 (CVSS 3.4) — Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thund…
    CVE-2026-124945 (CVSS 3.4) — Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thund…
    CVE-2026-124943 (CVSS 8.8) — Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.…
    CVE-2026-124944 (CVSS 4.3) — Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbir…
    CVE-2026-124937 (CVSS 3.4) — Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.…
    CVE-2026-124936 (CVSS 3.4) — Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High