Live › vulnerability › CVE-2026-118023
Go to dashboardA use-after-free bug in the WebRender graphics component of Firefox allows an attacker to escape the browser sandbox. The sources describe it as fixed in Firefox 159 and do not say what an attacker can reach after escaping.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than 159 is likely affected, since the sources say the flaw was fixed in that release. Systems on managed Firefox ESR or other distributions may ship the fix on a different schedule, and the sources do not say which builds are affected. unknown
No product ranges from the sources yet.
firefox --version or open the About Firefox page and compare the version against 159159 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118023")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.