Live › vulnerability › CVE-2026-118010
Go to dashboardA use-after-free bug in the Disability Access APIs component of Firefox could cause memory corruption when a page triggers it. The sources do not state what an attacker can achieve beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox older than version 159 is affected, since the flaw is in the browser itself. Teams that do not use Firefox on their machines or servers can skip it. The sources do not say whether a malicious web page alone is enough to trigger it.
No product ranges from the sources yet.
firefox --version; versions below 159 include the flaw.159 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118010")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.