CVE-2026-1249502026-11-10Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.