Live › vulnerability › CVE-2026-117878
Go to dashboardFirefox has a use-after-free bug in its IndexedDB storage component, where memory is used after being freed. The sources do not say what an attacker can achieve with it, such as code execution or only a crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any browser install of Firefox or Firefox ESR on an affected version, since IndexedDB is part of the browser's storage layer. The sources do not say whether specific content or site settings are needed to trigger it. Systems on a fixed version can skip it.
No product ranges from the sources yet.
firefox --version159, Firefox ESR 115.44, Firefox ESR 153.6159 or later115.44 or 153.6 or later, matching the ESR branch in useEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117878")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.