{"id":"CVE-2026-117927","kind":"vulnerability","aliases":["CVE-2026-117927"],"related":[],"title":"Firefox: use-after-free in SVG component may allow memory corruption","description":"Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"A use-after-free bug in Firefox's SVG component can corrupt memory when a page is rendered. The sources do not say what an attacker can run or read from it.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","runtime"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the installed Firefox version in Help > About Firefox, or run `firefox --version`, and compare it against the fixed releases.\n- For ESR installs, confirm the version is `115.44` or later on the 115 branch, or `153.6` or later on the 153 branch.","fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `115.44` or later on the 115 branch, or `153.6` or later on the 153 branch.","status":"open","published_at":"2026-10-27T14:16:48+00:00","first_seen_at":"2026-10-27T14:32:23+00:00","triaged_at":"2026-10-27T14:37:10+00:00","updated_at":"2026-10-27T14:37:10+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-27T14:37:10Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `115.44` or later on the 115 branch, or `153.6` or later on the 153 branch.","reach":"internet","title":"Firefox: use-after-free in SVG component may allow memory corruption","impact":"high","summary":"A use-after-free bug in Firefox's SVG component can corrupt memory when a page is rendered. The sources do not say what an attacker can run or read from it.","category":"runtime","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.5,"needs_auth":"no","worst_case":"unknown; memory corruption from rendering untrusted SVG content","analyst_note":"Check the Mozilla security advisory for this CVE to confirm whether it is exploitable from a web page and whether it is known to be exploited.","how_to_check":"- Check the installed Firefox version in Help > About Firefox, or run `firefox --version`, and compare it against the fixed releases.\n- For ESR installs, confirm the version is `115.44` or later on the 115 branch, or `153.6` or later on the 153 branch.","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Any team or user running a Firefox build before the fixed versions is exposed to this bug in its SVG rendering path. Systems that only run Firefox builds at or above the fixed versions can skip it. The sources do not say whether a page visit alone is enough to trigger it.","user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000599,"input_tokens":3240,"output_tokens":551,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117927':15A,18A '-2026':14A,17A '115.44':71C '153.6':75C '159':68C 'allow':10A 'attack':49B 'browser':19B 'bug':28B 'compon':8A,33B,61C 'corrupt':12A,35B 'cve':13A,16A 'desktop':20B 'esr':70C,74C 'firefox':1A,21B,30B,67C,69C,73C 'fix':65C 'free':5A,27B,57C 'may':9A 'memori':11A,36B 'page':39B 'read':53B 'render':41B 'run':51B 'runtim':22B 'say':46B 'sourc':43B 'svg':7A,32B,60C 'use':3A,25B,55C 'use-after-fre':2A,24B,54C 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Any team or user running a Firefox build before the fixed versions is exposed to this bug in its SVG rendering path. Systems that only run Firefox builds at or above the fixed versions can skip it. The sources do not say whether a page visit alone is enough to trigger it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117927","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117927","severity":null,"published_at":"2026-10-27T14:16:48+00:00","modified_at":"2026-10-27T14:16:48+00:00","first_seen_at":"2026-10-27T14:32:23+00:00","fetched_at":"2026-10-27T14:32:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}