Live › vulnerability › CVE-2026-117884
Go to dashboardA use-after-free bug in the Networking component of Firefox was fixed in Firefox 159 and Firefox ESR 115.44 and 153.6. The sources do not say what an attacker can do with it beyond the memory corruption class.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running an affected Firefox release on a desktop or server where the browser is installed. The sources do not say which networking path triggers the flaw or whether web content alone can reach it.
No product ranges from the sources yet.
firefox --version (or check Help > About) and compare against 159, 115.44 or 153.6 for ESR159 or later115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117884")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.