{"id":"CVE-2026-117913","kind":"vulnerability","aliases":["CVE-2026-117913"],"related":[],"title":"Firefox: use-after-free in SVG component may allow code execution","description":"Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.","summary":"A use-after-free bug in the SVG rendering component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. Memory reuse after free can let a crafted page corrupt memory and potentially run code in the browser.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","runtime"],"not_affected_if":["already-updated"],"how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- Compare against unknown fixed-version threshold for ESR users: ESR 153.6 is the fixed line\n- Check whether the version is below `159` for standard release or below `153.6` for ESR","fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `153.6` or later","status":"open","published_at":"2026-10-27T14:16:46+00:00","first_seen_at":"2026-10-27T14:32:22+00:00","triaged_at":"2026-10-27T14:37:25+00:00","updated_at":"2026-10-27T14:37:25+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-27T14:37:25Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `153.6` or later","reach":"internet","title":"Firefox: use-after-free in SVG component may allow code execution","impact":"high","summary":"A use-after-free bug in the SVG rendering component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. Memory reuse after free can let a crafted page corrupt memory and potentially run code in the browser.","category":"runtime","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.6,"needs_auth":"no","worst_case":"Malicious web page may run code inside the browser","analyst_note":"Confirm from Mozilla's security advisory whether the bug is exploitable in the wild and whether memory corruption leads to code execution; NVD entry has no severity data.","how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- Compare against unknown fixed-version threshold for ESR users: ESR 153.6 is the fixed line\n- Check whether the version is below `159` for standard release or below `153.6` for ESR","needs_analyst":true,"not_affected_if":["already-updated"],"who_is_affected":"Anyone running a Firefox release or ESR build older than the fixed versions, since the bug is in the browser's own SVG handling. Managed fleets that pin Firefox ESR should confirm they have picked up 153.6. Systems that have already moved to the fixed releases are not affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000606,"input_tokens":3228,"output_tokens":566,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117913':15A,18A '-2026':14A,17A '153.6':44B,81C '159':40B,77C 'allow':10A 'browser':19B,62B 'bug':28B 'code':11A,59B 'compon':8A,33B,70C 'corrupt':54B 'craft':52B 'cve':13A,16A 'desktop':20B 'esr':43B,80C 'execut':12A 'firefox':1A,21B,35B,39B,42B,76C,79C 'fix':37B,74C 'free':5A,27B,48B,66C 'let':50B 'may':9A 'memori':45B,55B 'page':53B 'potenti':57B 'render':32B 'reus':46B 'run':58B 'runtim':22B 'svg':7A,31B,69C 'use':3A,25B,64C 'use-after-fre':2A,24B,63C 'vulner':72C","nicknames":[],"mitigations":[],"who_affected":"Anyone running a Firefox release or ESR build older than the fixed versions, since the bug is in the browser's own SVG handling. Managed fleets that pin Firefox ESR should confirm they have picked up 153.6. Systems that have already moved to the fixed releases are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:46+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117913","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117913","severity":null,"published_at":"2026-10-27T14:16:46+00:00","modified_at":"2026-10-27T14:16:46+00:00","first_seen_at":"2026-10-27T14:32:22+00:00","fetched_at":"2026-10-27T14:32:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}