{"id":"CVE-2026-118005","kind":"vulnerability","aliases":["CVE-2026-118005"],"related":[],"title":"Firefox: use-after-free in WebRTC signaling lets attacker run code","description":"Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.","summary":"A use-after-free bug in the WebRTC signaling component of Firefox could let an attacker corrupt memory. The description says it was fixed in Firefox 159 and says nothing about the exact exploit outcome.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["firefox-159-or-later"],"how_to_check":"- `Help > About Firefox` to read the installed version\n- Compare against `159` or later","fix":"- Update Firefox to `159` or later","status":"open","published_at":"2026-10-27T14:16:58+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","triaged_at":"2026-10-27T14:33:39+00:00","updated_at":"2026-10-27T14:33:39+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-27T14:33:39Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later","reach":"internet","title":"Firefox: use-after-free in WebRTC signaling lets attacker run code","impact":"high","summary":"A use-after-free bug in the WebRTC signaling component of Firefox could let an attacker corrupt memory. The description says it was fixed in Firefox 159 and says nothing about the exact exploit outcome.","category":"runtime","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; memory corruption may allow code execution","analyst_note":"Check the NVD entry and Mozilla's Firefox 159 security advisory for trigger conditions and whether code execution is confirmed.","how_to_check":"- `Help > About Firefox` to read the installed version\n- Compare against `159` or later","needs_analyst":true,"not_affected_if":["firefox-159-or-later"],"who_is_affected":"Anyone running Firefox older than version 159 on a desktop or device where it is installed. The sources do not say whether a page visit alone is enough to trigger it or whether a specific WebRTC call is needed. Teams that only use Firefox ESR or a managed build should check their own release channel.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00056,"input_tokens":3229,"output_tokens":475,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118005':15A,18A '-2026':14A,17A '159':50B,74C 'attack':10A,39B 'browser':19B 'bug':28B 'code':12A 'compon':33B,67C 'corrupt':40B 'could':36B 'cve':13A,16A 'descript':43B 'desktop':20B 'exact':56B 'exploit':57B 'firefox':1A,21B,35B,49B,73C 'fix':47B,71C 'free':5A,27B,62C 'let':9A,37B 'memori':41B 'noth':53B 'outcom':58B 'run':11A 'runtim':22B 'say':44B,52B 'signal':8A,32B,66C 'use':3A,25B,60C 'use-after-fre':2A,24B,59C 'vulner':69C 'webrtc':7A,31B,65C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox older than version 159 on a desktop or device where it is installed. The sources do not say whether a page visit alone is enough to trigger it or whether a specific WebRTC call is needed. Teams that only use Firefox ESR or a managed build should check their own release channel.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118005","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118005","severity":null,"published_at":"2026-10-27T14:16:58+00:00","modified_at":"2026-10-27T14:16:58+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","fetched_at":"2026-10-27T14:32:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}