CVE-2026-124950 | Mozilla Firefox up to 159 CSS Parser cross-domain policy

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 159. This affects an unknown function of the component CSS Parser. Performing a manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is cataloged as CVE-2026-124950. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More