CVE-2026-124949 | Mozilla Firefox up to 159 SVG Remote Code Execution

November 10, 2026 Yanac

A vulnerability has been found in Mozilla Firefox up to 159 and classified as critical. Affected is an unknown function of the component SVG. The manipulation leads to Remote Code Execution.

This vulnerability is documented as CVE-2026-124949. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More