{"id":"CVE-2026-118007","kind":"vulnerability","aliases":["CVE-2026-118007"],"related":[],"title":"Firefox: use-after-free in JavaScript garbage collector fixed in 159","description":"Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.","summary":"A use-after-free bug in the JavaScript garbage collector of Firefox can corrupt memory when the browser runs certain scripts. The sources do not say what an attacker can achieve beyond that, and the description says the issue was fixed in Firefox 159.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","runtime"],"not_affected_if":["firefox-159-or-later"],"how_to_check":"- Run `Help > About Firefox` in the browser and compare the version with `159`.\n- unknown","fix":"- Update Firefox to `159` or later.","status":"open","published_at":"2026-10-27T14:16:58+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","triaged_at":"2026-10-27T14:33:38+00:00","updated_at":"2026-10-27T14:33:38+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-27T14:33:38Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later.","reach":"internet","title":"Firefox: use-after-free in JavaScript garbage collector fixed in 159","impact":"high","summary":"A use-after-free bug in the JavaScript garbage collector of Firefox can corrupt memory when the browser runs certain scripts. The sources do not say what an attacker can achieve beyond that, and the description says the issue was fixed in Firefox 159.","category":"runtime","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; memory corruption in the browser's JavaScript engine","analyst_note":"Check the Mozilla security advisory for CVE-2026-118007 to confirm the impact, whether it is exploited, and the exact fixed version.","how_to_check":"- Run `Help > About Firefox` in the browser and compare the version with `159`.\n- unknown","needs_analyst":true,"not_affected_if":["firefox-159-or-later"],"who_is_affected":"Anyone running Firefox older than version 159 is affected, since the flaw is in the browser's JavaScript engine. The sources do not say which configurations or sites are needed to trigger it, so unknown whether any group can skip the update.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000565,"input_tokens":3225,"output_tokens":485,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118007':15A,18A '-2026':14A,17A '159':12A,67B,83C 'achiev':54B 'attack':52B 'beyond':55B 'browser':19B,41B 'bug':28B 'certain':43B 'collector':9A,33B 'compon':76C 'corrupt':37B 'cve':13A,16A 'descript':59B 'desktop':20B 'firefox':1A,21B,35B,66B,82C 'fix':10A,64B,80C 'free':5A,27B,71C 'garbag':8A,32B 'gc':75C 'issu':62B 'javascript':7A,31B,74C 'memori':38B 'run':42B 'runtim':22B 'say':49B,60B 'script':44B 'sourc':46B 'use':3A,25B,69C 'use-after-fre':2A,24B,68C 'vulner':78C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox older than version 159 is affected, since the flaw is in the browser's JavaScript engine. The sources do not say which configurations or sites are needed to trigger it, so unknown whether any group can skip the update.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118007","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118007","severity":null,"published_at":"2026-10-27T14:16:58+00:00","modified_at":"2026-10-27T14:16:58+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","fetched_at":"2026-10-27T14:32:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}