Live › vulnerability › CVE-2026-117896
Go to dashboardA use-after-free flaw in the DOM Core and HTML component of Firefox was fixed in Firefox 159 and Firefox ESR 115.44 and 153.6. The sources do not say what an attacker gains beyond the general memory-corruption risk.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any installation of Firefox or Firefox ESR older than the fixed versions is affected. The sources do not say whether a specific page, configuration or feature is required to trigger the flaw. Teams that only use managed or pinned browser builds should confirm their build includes the fix.
No product ranges from the sources yet.
about:support in Firefox and check the Application Basics version against 159, 115.44 or 153.6159 or later115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117896")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.