Live › vulnerability › CVE-2026-117983
Go to dashboardA use-after-free bug in the Graphics component of Firefox can be triggered to corrupt memory. The sources do not say what an attacker gains beyond that, so treat the impact as unconfirmed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams running Firefox or Firefox ESR on desktops or servers are affected by versions before the fixed releases. The sources do not say which platforms or configurations are most exposed, so unknown. Systems that already run Firefox 159 or ESR 153.6 are not affected.
No product ranges from the sources yet.
firefox --versionfirefox --version on systems using Firefox ESR; compare against 153.6159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117983")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.