anonhaven

CVE-2026-118021

NONE
Updated Oct 27, 2026
Firefox
Parameter Value
Vendor Firefox
Public PoC No

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159.

References 2

https://bugzilla.mozilla.org/show_bug.cgi?id=2076695
security@mozilla.org
https://www.mozilla.org/security/advisories/mfsa2026-118/
security@mozilla.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-118027

Firefox

None

CVE-2026-118026

Firefox

None

CVE-2026-118025

Firefox

None

CVE-2026-118024

Firefox

None

CVE-2026-118023

Firefox

None