Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124950
NONE
EPSS 0.18%
Updated Nov 10, 2026
Firefox
CVE Details
CVE ID
CVE-2026-124950
Published Date
Nov 10, 2026
Vendor
Firefox
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.18%
Likelihood of exploitation in next 30 days
Percentile:
8.1th percentile (higher than 8.1% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory