Skip to content

CVE record · 1 source

CVE-2026-124931

Same-origin policy bypass in the DOM: Core & HTML component.

Vendor: Mozilla
Product: Firefox
Exposure class: Browser

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 1h ago

Same-origin policy bypass in the DOM: Core & HTML component.

Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Fix available CVE-2026-124931 Mozilla