{"id":"CVE-2026-117885","kind":"vulnerability","aliases":["CVE-2026-117885"],"related":[],"title":"Firefox: use-after-free in Grid layout code fixed in 159","description":"Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.","summary":"A use-after-free in Firefox's Layout: Grid component lets memory be reused after it is freed. The sources do not say what an attacker gets from it beyond memory corruption.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","runtime"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the installed Firefox version in About Firefox or with `firefox --version`; versions below `159` (or ESR below `153.6`) are in scope.\n- Check the ESR line with the same command on ESR installs.","fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `153.6` or later.","status":"open","published_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","triaged_at":"2026-10-27T14:37:54+00:00","updated_at":"2026-10-27T14:37:54+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-27T14:37:54Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `153.6` or later.","reach":"unknown","title":"Firefox: use-after-free in Grid layout code fixed in 159","impact":"medium","summary":"A use-after-free in Firefox's Layout: Grid component lets memory be reused after it is freed. The sources do not say what an attacker gets from it beyond memory corruption.","category":"runtime","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown: memory corruption in the browser; code execution not confirmed by sources","analyst_note":"Check the Mozilla security advisory for this CVE to confirm reach, user interaction and whether it is exploitable beyond a crash.","how_to_check":"- Check the installed Firefox version in About Firefox or with `firefox --version`; versions below `159` (or ESR below `153.6`) are in scope.\n- Check the ESR line with the same command on ESR installs.","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Anyone running Firefox or Firefox ESR older than the fixed versions, on desktop or in managed fleets. The sources do not say whether web content alone can trigger it or whether a user must visit a page.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000576,"input_tokens":3236,"output_tokens":504,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117885':15A,18A '-2026':14A,17A '153.6':75C '159':12A,71C 'attack':49B 'beyond':53B 'browser':19B 'code':9A 'compon':33B,64C 'corrupt':55B 'cve':13A,16A 'desktop':20B 'esr':74C 'firefox':1A,21B,29B,70C,73C 'fix':10A,68C 'free':5A,27B,59C 'freed':41B 'get':50B 'grid':7A,32B,63C 'layout':8A,31B,62C 'let':34B 'memori':35B,54B 'reus':37B 'runtim':22B 'say':46B 'sourc':43B 'use':3A,25B,57C 'use-after-fre':2A,24B,56C 'vulner':66C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox or Firefox ESR older than the fixed versions, on desktop or in managed fleets. The sources do not say whether web content alone can trigger it or whether a user must visit a page.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117885","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117885","severity":null,"published_at":"2026-10-27T14:16:43+00:00","modified_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","fetched_at":"2026-10-27T14:32:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}