Live › vulnerability › CVE-2026-118014
Go to dashboardA use-after-free bug in the JIT compiler of Firefox's JavaScript engine lets memory be reused after it is freed. Per the sources it was fixed in Firefox 159; the sources do not state what an attacker can gain beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox older than 159 is likely exposed, since the flaw is in the browser's JavaScript JIT component that runs web page scripts. The sources do not say which platforms or configurations are affected beyond that, or whether the bug is reachable without user interaction.
No product ranges from the sources yet.
firefox --version) and compare it with 159159 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118014")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.