Threat video1:00
CVE-2026-120572 Firefox 159.0.1 Flaw: Detection & IOCs
Firefox 159.0.1 patches CVE-2026-120572, a layout memory-safety flaw in web pages: 9 detection rules, 9 IOCs and a free Splunk SPL rule.
Read the full threat intel for Firefox 159.0.1 layout flaw →
Chapters
- 0:00The hookA Firefox layout flaw: severity 8.8.
- 0:04The storyMozilla found a memory-corruption flaw.
- 0:11Attack pathAn attacker entices a user to open a malicious webpage.
- 0:26AttributionNo threat actor: this was defensive research.
- 0:31Indicators of compromise3 indicators to hunt: 1 URL, 1 file name and 1 package name.
- 0:37MITRE ATT&CK techniques3 ATT&CK techniques, from execution to impact.
- 0:42Remediation2 steps now: Upgrade Firefox for Windows.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00A Firefox layout flaw: severity 8.8.
0:05Mozilla found a memory-corruption flaw.
0:07Firefox 159 patches it.
0:11An attacker entices a user to open a malicious webpage.
0:15The layout engine triggers an out-of-bounds condition.
0:19Firefox crashes, denying service to the user.
0:26No threat actor: this was defensive research.
0:313 indicators to hunt: 1 URL, 1 file name and 1 package name.
0:383 ATT&CK techniques, from execution to impact.
0:432 steps now: Upgrade Firefox for Windows.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.