Live › vulnerability › CVE-2026-118012
Go to dashboardA use-after-free bug exists in the DOM Animation component of Firefox. The sources do not say what an attacker gets from triggering it, and the advisory only states it was fixed in Firefox 159.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox older than version 159. The sources do not describe the triggering conditions, so whether a page or only local use is needed is unknown.
No product ranges from the sources yet.
firefox --version) and compare it to 159.159 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118012")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.