Live › vulnerability › CVE-2026-117986
Go to dashboardA use-after-free bug in Firefox's Graphics component was fixed in Firefox 159 and Firefox ESR 153.6. The sources do not say what an attacker gains beyond the memory corruption itself.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run Firefox or Firefox ESR on their own machines or managed desktops are affected until they update. The sources do not say which configurations or content types trigger the flaw, so the exact exposure is unknown.
No product ranges from the sources yet.
firefox --version159 for Firefox or below 153.6 for Firefox ESR159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117986")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.