Live › vulnerability › CVE-2026-117876
Go to dashboardA use-after-free bug in Firefox's Layout: Text and Fonts component lets memory be reused after it is freed. An attacker who gets a user to load a crafted page could potentially crash the browser or run code in it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any installed Firefox build older than the fixed versions is affected, so any browser on a user's desktop or a managed fleet. Managed teams should push the update through their normal browser channel. Sites and servers you run are not exposed through this flaw.
No product ranges from the sources yet.
firefox --version or Help > About Firefox159 or later115.44 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117876")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.