CVE-2026-124918
EUVD-2026-12090310.11.2026, 14:17
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| mozilla | firefox | 𝑥 < 160 | CNA |
| mozilla | firefox_esr | 116.0.0 ≤ 𝑥 < 153.7 | CNA |
| mozilla | thunderbird | 𝑥 < 160 | CNA |
| mozilla | thunderbird_esr | 𝑥 < 153.7 | CNA |
Debian Releases