Live › vulnerability › CVE-2026-118005
Go to dashboardA use-after-free bug in the WebRTC signaling component of Firefox could let an attacker corrupt memory. The description says it was fixed in Firefox 159 and says nothing about the exact exploit outcome.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox older than version 159 on a desktop or device where it is installed. The sources do not say whether a page visit alone is enough to trigger it or whether a specific WebRTC call is needed. Teams that only use Firefox ESR or a managed build should check their own release channel.
No product ranges from the sources yet.
Help > About Firefox to read the installed version159 or later159 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118005")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.