Live › vulnerability › CVE-2026-118019
Go to dashboardA race condition causes a use-after-free in Firefox's DOM File component, which can corrupt memory while a page runs. The sources do not say what an attacker can achieve beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than 159 with a browser that loads untrusted web content. The sources do not state which platforms or configurations are affected beyond that. Users on current Firefox releases can skip it.
No product ranges from the sources yet.
firefox --version or Help > About Firefox; versions below 159 are the ones the fix addresses.159 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118019")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.