CVE-2026-124902 | Mozilla Firefox up to 115.44/153.6/159 Audio/Video cross-domain policy

November 10, 2026 Yanac

A vulnerability identified as problematic has been detected in Mozilla Firefox up to 115.44/153.6/159. The impacted element is an unknown function of the component Audio/Video. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is referenced as CVE-2026-124902. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More