Live › vulnerability › CVE-2026-118013
Go to dashboardA use-after-free bug in Firefox's Layout component for images, video and HTML frames can corrupt memory when a page triggers it. The sources do not say what an attacker can run or read after triggering it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox older than version 159 with normal browsing enabled. The sources do not say whether the bug needs a particular page, setting or user action to be reached, so unknown beyond that.
No product ranges from the sources yet.
firefox --version (or check About Firefox) and compare against the fixed release 159.159 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118013")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.