Live › vulnerability › CVE-2026-118020
Go to dashboardA use-after-free bug in Firefox's Layout component lets memory be reused after it is freed. The sources do not say what an attacker can gain beyond that, so the impact is not confirmed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams whose staff or systems run Firefox earlier than version 159 are affected. The sources do not say which configurations or content paths trigger the bug, so the exact exposure is unknown.
No product ranges from the sources yet.
firefox --version or open About Firefox to see the installed version159 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118020")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.