Live › vulnerability › CVE-2026-117892
Go to dashboardA use-after-free bug in the WebRTC networking component of Firefox allows privilege escalation. The sources do not say what an attacker must do first or how the escalation is reached.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any installation of Firefox or Firefox ESR older than the fixed releases is affected, since the flaw is in the browser's WebRTC networking code. The sources do not say whether a page visit alone is enough to trigger it. Systems that already run the fixed versions can skip it.
No product ranges from the sources yet.
firefox --version and compare it to the fixed releases.159 or later.115.44 or 153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117892")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.