Live › vulnerability › CVE-2026-117923
Go to dashboardA use-after-free bug in Firefox's Audio/Video component can corrupt memory when handling media. The sources do not say what an attacker can run once the memory is corrupted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any installation of Firefox or Firefox ESR older than the fixed versions is in scope, since the flaw is in the browser's own media code and is reached through web content. The sources do not say which media formats or configurations trigger it. Systems already on the fixed releases can skip it.
No product ranges from the sources yet.
firefox --version, and compare it to the fixed releases.firefox --version against 115.44 and 153.6.159 or later.115.44 or later on the 115 branch, or 153.6 or later on the 153 branch.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117923")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.