PT-2026-141665
CVE-2026-124900
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 160
Thunderbird versions prior to 160
Description
A use-after-free issue exists in the DOM: Service Workers component, which can lead to a sandbox escape. A sandbox escape occurs when a process breaks out of its restricted environment to execute unauthorized code on the host system.
Recommendations
Update Firefox to version 160.
Update Thunderbird to version 160.
Found an issue in the description? Have something to add? Feel free to write us 👾