{"id":"CVE-2026-124917","published":"2026-11-10T14:17:25.483","lastModified":"2026-11-10T21:19:18.507","description":"Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2058648","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-125/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-127/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-128/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-129/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free flaw in Firefox's Widget: Gtk component allows a sandbox escape when triggered via a malicious web page, enabling attackers to break out of the browser's sandbox and execute arbitrary code with the privileges of the compromised process. This is critical due to the high impact on confidentiality, integrity, and availability.","exploitability":"Exploitation requires user interaction (e.g., visiting a crafted webpage) and precise memory manipulation, making it non-trivial but feasible for skilled attackers given the sandbox escape context.","blast_radius":"Successful exploitation could lead to full system compromise via arbitrary code execution outside the browser sandbox, affecting all users on vulnerable installations.","remediation":"Upgrade to Firefox 160, Firefox ESR 153.7, Thunderbird 160, or Thunderbird 153.7 immediately.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sandbox-escape","use-after-free","web","firefox","thunderbird"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:55:03.031Z"}}