Firefox <160 / ESR <153.7 Nimbus Desktop Client PrivEsc
CVE-2026-124951 Published on November 10, 2026
Privilege escalation in the Nimbus Desktop Client component
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Products Associated with CVE-2026-124951
Want to know whenever a new CVE is published for Mozilla Firefox? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version 153.7, <= 153.* is unaffected.
- Version 160, <= * is unaffected.