Vulnerability in Mozilla Firefox

[ Description ]Official description

Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159.0.1.

[ Fixes ]Fixes and patches

• Security bulletin: Mozilla mfsa2026-123Vendor patch or bulletin · CERT-FR · mozilla.org/en-US/security/advisories/mfsa2026-123, cited by CERT-FR CERTFR-2026-AVI-1455

[ Advisories ]Government CERT advisories

• CERT-FR4 Nov 2026CERTFR-2026-AVI-1455

  Vulnerability in Mozilla Firefox Translated from French

  A vulnerability has been discovered in Mozilla Firefox. It allows an attacker to cause a security problem not specified by the vendor.

  CVE-2026-120572
• BSI CERT-Bund3 Nov 2026WID-SEC-2026-4304

  Mozilla Firefox: Vulnerability allows an unspecified attack Translated from German

  CVE-2026-120572

[ References ]References

• bugzilla.mozilla.org/show_bug.cgi
• www.mozilla.org/security/advisories/mfsa2026-123