UBUNTU-CVE-2026-124881: Use After Free
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.45 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.7 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 160 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 153.7
Event History
Frequently Asked Questions
Which products contain fixes for this issue?
The issue was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. The affected Ubuntu package list includes mozjs38, mozjs52, mozjs68, mozjs78, mozjs91, mozjs102, mozjs115, and thunderbird.
What is known about exploitation prerequisites or affected default configurations?
The available information identifies a use-after-free in the CSS Parsing and Computation component, but does not state attacker prerequisites, exposure conditions, or whether default configurations are affected.