CVE-2026-124900 Sandbox escape due to use-after-free in the DOM: Service Workers component
CriticalCVSS 9.6
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
Affected products
No affected product data has been published yet.
References
- bugzilla.mozilla.org
- www.mozilla.org
- www.mozilla.org
- Red Hat CVE page vendor-advisory
- Red Hat Bugzilla 2570098 issue-tracking
- www.cve.org
- nvd.nist.gov