{"id":"CVE-2026-118026","kind":"vulnerability","aliases":["CVE-2026-118026"],"related":[],"title":"Firefox: invalid pointer in JavaScript garbage collector fixed in 159","description":"Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.","summary":"Firefox's JavaScript garbage collector can use an invalid pointer, a memory-safety bug. The sources do not say what an attacker can achieve beyond that, so the impact is unconfirmed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser-users","desktop","firefox","runtime"],"not_affected_if":["firefox-159-or-later"],"how_to_check":"- `Help > About Firefox` in the browser shows the installed version; a version below `159` is affected\n- Enterprise fleets: check the Firefox version reported by the device management tool","fix":"- Update Firefox to `159` or later","status":"open","published_at":"2026-10-27T14:17:00+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","triaged_at":"2026-10-27T14:33:18+00:00","updated_at":"2026-10-27T14:33:18+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-27T14:33:18Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later","reach":"internet","title":"Firefox: invalid pointer in JavaScript garbage collector fixed in 159","impact":"medium","summary":"Firefox's JavaScript garbage collector can use an invalid pointer, a memory-safety bug. The sources do not say what an attacker can achieve beyond that, so the impact is unconfirmed.","category":"runtime","nicknames":[],"who_cares":["firefox","desktop","browser-users"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the Mozilla Foundation security advisory for Firefox 159 to confirm the severity, exploitability and whether the bug is reachable from web content.","how_to_check":"- `Help > About Firefox` in the browser shows the installed version; a version below `159` is affected\n- Enterprise fleets: check the Firefox version reported by the device management tool","needs_analyst":true,"not_affected_if":["firefox-159-or-later"],"who_is_affected":"Anyone running Firefox before version 159 is in scope, since the flaw is in the browser's JavaScript engine that runs every web page. Servers and build pipelines that do not run a desktop browser are unlikely to be exposed. The sources do not say whether specific configurations are safer.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000571,"input_tokens":3227,"output_tokens":497,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118026':13A,16A '-2026':12A,15A '159':10A,68C 'achiev':47B 'attack':45B 'beyond':48B 'browser':18B 'browser-us':17B 'bug':37B 'collector':7A,27B 'compon':61C 'cve':11A,14A 'desktop':20B 'firefox':1A,21B,23B,67C 'fix':8A,65C 'garbag':6A,26B 'gc':60C 'impact':52B 'invalid':2A,31B,55C 'javascript':5A,25B,59C 'memori':35B 'memory-safeti':34B 'pointer':3A,32B,56C 'runtim':22B 'safeti':36B 'say':42B 'sourc':39B 'unconfirm':54B 'use':29B 'user':19B 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox before version 159 is in scope, since the flaw is in the browser's JavaScript engine that runs every web page. Servers and build pipelines that do not run a desktop browser are unlikely to be exposed. The sources do not say whether specific configurations are safer.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:17:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118026","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118026","severity":null,"published_at":"2026-10-27T14:17:00+00:00","modified_at":"2026-10-27T14:17:00+00:00","first_seen_at":"2026-10-27T14:32:25+00:00","fetched_at":"2026-10-27T14:32:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}