Live › vulnerability › CVE-2026-117932
Go to dashboardA use-after-free flaw in the DOM Core and HTML component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. The sources do not state the attacker's exact gain, but use-after-free bugs in browser engines are commonly abused to run code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR below the fixed versions on desktops or managed endpoints is affected. The sources do not say whether specific configurations or content types are required to trigger it, so unknown for finer scoping.
No product ranges from the sources yet.
firefox --version on the machine159 (Firefox) or 153.6 (Firefox ESR)159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117932")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.