CVE-2026-124927: Site isolation issue in the Graphics: WebRender component
Published Nov 10, 2026
·Updated
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Affected Software
4 affected componentsFixes available
Mozilla Firefox<160
Mozilla Firefox ESR<153.7
Mozilla Firefox ESR<153.7
153.7
Mozilla Firefox<160
160
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 153.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 160 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.7
Event History
Nov 10, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
Description
Data Sourced
via NVD·02:17 PM
Description
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-124853
- CVE-2026-124854
- CVE-2026-124855
- CVE-2026-124856
- CVE-2026-124857
- CVE-2026-124858
- CVE-2026-124859
- CVE-2026-124860
- CVE-2026-124861
- CVE-2026-124862
- CVE-2026-118007
- CVE-2026-124863
- CVE-2026-124864
- CVE-2026-124865
- CVE-2026-124866
- CVE-2026-124868
- CVE-2026-124869
- CVE-2026-124870
- CVE-2026-124872
- CVE-2026-124873
- CVE-2026-124874
- CVE-2026-124875
- CVE-2026-124876
- CVE-2026-124877
- CVE-2026-124879
- CVE-2026-124880
- CVE-2026-124881
- CVE-2026-124882
- CVE-2026-124883
- CVE-2026-124884
- CVE-2026-124885
- CVE-2026-124886
- CVE-2026-124887
- CVE-2026-124888
- CVE-2026-124889
- CVE-2026-124890
- CVE-2026-124891
- CVE-2026-124892
- CVE-2026-124893
- CVE-2026-124894
- CVE-2026-124895
- CVE-2026-124896
- CVE-2026-124897
- CVE-2026-124898
- CVE-2026-124899
- CVE-2026-124901
- CVE-2026-124902
- CVE-2026-124903
- CVE-2026-124905
- CVE-2026-124906
- CVE-2026-124907
- CVE-2026-124909
- CVE-2026-124910
- CVE-2026-124912
- CVE-2026-118019
- CVE-2026-124913
- CVE-2026-124914
- CVE-2026-124915
- CVE-2026-124917
- CVE-2026-124918
- CVE-2026-124919
- CVE-2026-124922
- CVE-2026-118021
- CVE-2026-124924
- CVE-2026-124926
- CVE-2026-124927
- CVE-2026-124929
- CVE-2026-118024
- CVE-2026-124930
- CVE-2026-124931
- CVE-2026-124932
- CVE-2026-124933
- CVE-2026-124934
- CVE-2026-124935
- CVE-2026-124938
- CVE-2026-124939
- CVE-2026-124940
- CVE-2026-124941
- CVE-2026-124942
- CVE-2026-124948
- CVE-2026-124951
- CVE-2026-124852
- CVE-2026-124867
- CVE-2026-124871
- CVE-2026-124878
- CVE-2026-124900
- CVE-2026-124904
- CVE-2026-124908
- CVE-2026-124911
- CVE-2026-124920
- CVE-2026-124921
- CVE-2026-124923
- CVE-2026-124925
- CVE-2026-124928
- CVE-2026-124936
- CVE-2026-124937
- CVE-2026-124943
- CVE-2026-124944
- CVE-2026-124945
- CVE-2026-124946
- CVE-2026-124947
- CVE-2026-124949
- CVE-2026-124950
Frequently Asked Questions
1
Which releases contain the fix?
The issue was fixed in Firefox 160 and Firefox ESR 153.7.
2
Which products should be checked for exposure?
Mozilla Firefox and Mozilla Firefox ESR are listed as affected software. Systems running versions earlier than the stated fixed releases should be reviewed and updated.